Examkin

Soru

Zorluk: KolayAzure Role-Based Access Control (RBAC)

An administrator assigns a developer the built-in Contributor role for an Azure resource group. Which of the following tasks can the developer perform within this resource group? (Select TWO.)

  1. Create new resources, such as virtual machines and storage accountsCevap
  2. Delete existing resources, such as virtual machines and storage accountsCevap
  3. C
    Restrict resource deployments to specific Azure regions
  4. D
    Enforce a requirement that all resources must have specific tags applied

Cevap

The developer can create new resources and delete existing resources within the resource group.
The Contributor role allows users to perform full resource management tasks, which include creating new resources and deleting existing resources within the resource group where they hold the role.

Adım Adım Çözüm

1
Determine the permissions associated with the Contributor role in Azure RBAC.
The Contributor role allows full access to create, update, and delete resources, but does not allow assigning roles or enforcing governance policies.
This establishes what resources the developer can manage.
2
Distinguish between Azure RBAC and Azure Policy.
Creating and deleting resources are RBAC actions. Restricting regions and enforcing tags are compliance actions handled by Azure Policy.
This filters out the distractors that confuse RBAC with Azure Policy.

Anahtar Kavram

Azure Role-Based Access Control (RBAC) grants specific permissions to manage Azure resources, whereas Azure Policy enforces compliance and resource properties.
Bu soruyu puanla

Konular

Azure Role-Based Access Control (RBAC)

Bu konudan daha fazla soru