Examkin

Soru

Zorluk: OrtaAzure Role-Based Access Control (RBAC)

Your company has an Azure subscription containing a resource group named Dev-RG. You need to grant a junior administrator the ability to create and manage all resources within Dev-RG. The junior administrator must not be allowed to assign roles or grant permissions to other users. Which of the following should you assign to the junior administrator's account for Dev-RG?

  1. A
    The Owner role
  2. The Contributor roleCevap
  3. C
    An Azure Policy definition
  4. D
    The Reader role

Cevap

The Contributor role
The Contributor role allows the user to manage all resources within the specified scope, including creating and deleting resources, but it does not allow the user to assign roles in Azure RBAC or grant permissions to others. This perfectly aligns with the security requirements of the scenario.

Adım Adım Çözüm

1
Analyze the access control requirements for the junior administrator.
The administrator needs permissions to create and manage all resources within the specific resource group (Dev-RG) but must be restricted from delegating access or assigning roles to other users.
This establishes the scope (Resource Group) and the required actions (create and manage resources, but no access management).
2
Evaluate the capabilities of Azure Role-Based Access Control (RBAC) roles against the requirements.
The Contributor role allows managing all resources but prevents role assignment. The Owner role allows both resource management and role assignment. The Reader role only allows viewing resources.
This matches the requirements to the correct built-in Azure RBAC role.
3
Differentiate between Azure RBAC and Azure Policy.
Azure Policy regulates resource configuration compliance rather than user permissions, making it unsuitable for granting access.
This eliminates the policy-related distractor.

Anahtar Kavram

Azure Role-Based Access Control (RBAC) built-in roles and scope
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Azure Role-Based Access Control (RBAC)

Bu konudan daha fazla soru