Practice Test 1 | AZ 104 | Dumps | Mock Test
A company has an Azure subscription named WebMagictaging. They also have a resource group named WebMagic-rg. The resource group has created an internal load balancer named “WebMagiclab-internal” and a public load balancer named “WebMagiclab-public”. They want to give a user named “WebMagiclabusr” permissions to configure both load balancers. The solution must follow the principle of least privilege.
Which role would you assign to the user to allow the addition of a backend pool to the load balancer “WebMagiclab-internal”?
B. Network Contributor role on WebMagiclab-internal
C. Network Contributor role on WebMagic-rg
D. Owner role on WebMagiclab-internal
C
To provide the ability to add the backend pool, “WebMagiclabusr” must have the read access to the details of the virtual machine and the virtual network. For this reason, the user should be assigned a Network Contributor role within the resource group. In this role, “WebMagiclabusr” will have the read access to the VM and full access to the group’s network resources.
The other options are all invalid since they would only provide access to the load balancer resource itself. They will not provide access to the other resources such as the virtual machines that needed to be added to the back-end pool.
For more information on Role-based access control, please visit the following URL-
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#network-contributor
https://docs.microsoft.com/en-us/azure/role-based-access-control/overview
Comments are closed, but trackbacks and pingbacks are open.