Soru

Zorluk: KolayAzure Role-Based Access Control (RBAC)

A company needs to grant a database administrator permission to manage Azure SQL databases within a subscription, while ensuring they cannot modify any virtual networks in the same subscription. Which Azure governance feature should you use to implement this access control?

  1. A
    Azure Policy
  2. Azure Role-Based Access Control (RBAC)Cevap
  3. C
    Azure Resource Locks
  4. D
    Azure Resource Tags

Cevap

Azure Role-Based Access Control (RBAC)
Azure Role-Based Access Control (RBAC) is the correct feature to manage who has access to Azure resources, what they can do with those resources, and what areas they have access to. By assigning the database administrator a specific role at the subscription or resource group level, you can grant them the necessary permissions to manage SQL databases while omitting permissions for virtual networks.

Adım Adım Çözüm

1
Analyze the requirement to grant user-specific administrative permissions (managing SQL databases while restricting virtual network modification).
Identify that the core requirement is managing authorization and access control for a user.
This helps determine which Azure governance tool is responsible for identity and access management.
2
Compare the capabilities of Azure governance features: Azure RBAC, Azure Policy, Azure Resource Locks, and Azure Resource Tags.
Establish that Azure RBAC is the tool that assigns roles to identities (users/groups) for resource management, whereas Azure Policy enforces resource state/compliance, Resource Locks prevent deletion/modification globally, and Tags are metadata.
Correctly matching the requirement to the capability of the specific Azure feature ensures the correct solution.

Anahtar Kavram

Azure Role-Based Access Control (RBAC)
Tahmini Süre:45s
Bu soruyu puanla