Examkin

Soru

Zorluk: KolayAzure Role-Based Access Control (RBAC)

An organization needs to allow a new security auditor to view the configuration of all resources within a specific Azure subscription. However, the auditor must not be able to make any modifications or delete any resources.

Which Azure configuration should the administrator implement to meet this requirement?

  1. Assign the Reader role to the auditor at the subscription scope.Cevap
  2. B
    Apply a ReadOnly resource lock to the subscription to limit the auditor's permissions.
  3. C
    Create an Azure Policy that grants read-only permissions to the auditor's user account.
  4. D
    Assign the Contributor role to the auditor and use Azure Policy to restrict their account to read-only access.

Cevap

Assign the Reader role to the auditor at the subscription scope.
Assigning the Reader role to the auditor at the subscription scope is the correct solution. Azure Role-Based Access Control (RBAC) is designed to manage user permissions. The Reader role allows viewing all resources without making modifications, and assigning it at the subscription level ensures the access inherits to all nested resources.

Adım Adım Çözüm

1
Identify the required level of access and the target scope.
The auditor requires read-only access (no modifications or deletions) across the entire Azure subscription.
This establishes the scope as the subscription and the access level as read-only.
2
Evaluate the appropriate Azure management tool for managing user permissions.
Azure Role-Based Access Control (RBAC) is the correct service for authorizing specific user actions on resources.
Azure Policy is for compliance and resource properties, while resource locks apply globally to all users, making RBAC the only tool designed for user-specific authorization.
3
Select the built-in RBAC role that provides read-only permissions.
The Reader role allows viewing resources without allowing any modifications or deletions.
Assigning the Reader role at the subscription scope ensures that these permissions inherit down to all resource groups and resources within that subscription.

Anahtar Kavram

Azure Role-Based Access Control (RBAC) is used to manage user authorization and access to resources, with permissions inheriting from higher scopes (like Subscriptions) down to lower scopes (like Resource Groups).
Tahmini Süre:45s
Bu soruyu puanla

Konular

Azure Role-Based Access Control (RBAC)

Bu konudan daha fazla soru