Microsoft Azure Security Technologies AZ-500 — Topic 2 Question 104

Question

You have an Azure subscription that contains the resources shown in the following table. You need to ensure that ServerAdmins can perform the following tasks: • Create virtual machines in RG1 only. • Connect the virtual machines to the existing virtual networks in RG2 only. The solution must use the principle of least privilege. Which two role-based access control (RBAC) roles should you assign to ServerAdmins? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Accepted Answer

Correct answer: A, F. The correct answer is A, F. Option A: a custom RBAC role for RG2 Option F: the Virtual Machine Contributor role for RG1 An Azure Virtual Machine provides full control of the OS when you need to run custom or legacy workloads. Azure RBAC assigns roles at a scope to grant least-privilege access to resources.

Microsoft Azure Security Technologies AZ-500 — Question 104