Exam AZ-720 topic 4 question 34 discussion

Actual exam question from Microsoft's AZ-720

Question #: 3
Topic #: 4

HOTSPOT -
A company uses Azure Active Directory (Azure AD) with Azure role-based access control (RBAC) for access to resources.
Some users report that they are unable to grant RBAC roles to other users.
You need to troubleshoot the issue.
How should you complete the Azure Monitor query? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by cris_exam at April 22, 2023, 2:59 p.m.

Comments

Submit Cancel

cris_exam

2 years, 2 months ago

Correct answer is AzureActivity with "Microsoft.Authorization/roleAssignments/write" - just tested it in my environment - query ran successful with no errors. AzureActivity | where Authorization contains "Microsoft.Authorization/roleAssignments/write" and ActivityStatus == "Failed"

upvoted 3 times

cris_exam

2 years, 2 months ago

https://learn.microsoft.com/en-us/azure/azure-monitor/reference/tables/azureactivity

upvoted 1 times

cris_exam

2 years, 2 months ago

Found an even better doc that shows this to be correct as above stated. https://learn.microsoft.com/en-us/azure/role-based-access-control/change-history-report#azure-monitor-logs

upvoted 2 times

...