Exam AZ-301 All Questions

View all questions & answers for the AZ-301 exam

Exam AZ-301 topic 2 question 4 discussion

Actual exam question from Microsoft's AZ-301

Question #: 4
Topic #: 2

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains a resource group named RG1.
You create an Azure Active Directory (Azure AD) group named ResearchUsers that contains the user accounts of all researchers.
You need to recommend a solution that meets the following requirements:
✑ The researchers must be allowed to create Azure virtual machines.
The researchers must only be able to create Azure virtual machines by using specific Azure Resource Manager templates.

Solution: Create a lab in Azure DevTest Lab. Configure the DevTest Labs settings. Assign the DevTest Labs User role to the ResearchUsers group.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Instead: On RG1, assign the Contributor role to the ResearchUsers group. Create a custom Azure Policy definition and assign the policy to RG1.

by lorimer1 at Jan. 12, 2020, 10:50 p.m.

Comments

Submit Cancel

lorimer1

Highly Voted 5 years, 5 months ago

Answer: A DevTest Labs allows the user role to create vms. They can stop and start the vms they create: https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-add-devtest-user

upvoted 13 times

dumpmaster

5 years, 4 months ago

Yes: The researchers must be allowed to create Azure virtual machines. But I don't know this: The researchers must only be able to create Azure virtual machines by using specific Azure Resource Manager templates.

upvoted 2 times

mykolaantoniv

5 years, 4 months ago

Using specific ARM can be allowed via Policy

upvoted 3 times

tartar

4 years, 9 months ago

B is ok

upvoted 3 times

...

mindtrax

4 years, 3 months ago

You can specify specific marketplace images that can be deployed, since they are basically arm templates I think the answer is yes

upvoted 1 times

...

gboyega

Highly Voted 4 years, 11 months ago

I would go with B 1. I created a DevTestLab environment in my Lab. a. I was able to create a VM b. But wasnt able to specify a custom template for the User to use in deploying VMs

upvoted 12 times

TinyTrexArmz

4 years, 11 months ago

Agreed, the answer is B. You can specify the SKU but I can't see a policy to allow even one custom ARM template no less multiple. The question specifies that the researchers must be able to choose between ARM templates (plural).

upvoted 6 times

...

Aghora

Most Recent 4 years, 4 months ago

YES. Resource Manager template limitations in DevTest Labs Consider these limitations when using Resource Manager templates in DevTest Labs: You can't create formulas or custom images from lab VMs that were created from a Resource Manager template. Most policies aren't evaluated when you deploy Resource Manager templates. For example, you might have a lab policy that a user can create only five VMs. However, a user can deploy a Resource Manager template that creates dozens of VMs. Policies that aren't evaluated include: Number of VMs per user Number of premium VMs per lab user Number of premium disks per lab user

upvoted 1 times

5 years ago

The answer is NO. You cannot be an owner of a Resource Group, you are a Subscription owner. You cannot promote someone to just being an owner of a RG.

upvoted 1 times

cloudycloud

4 years, 9 months ago

obviously wrong.

upvoted 2 times

...

AmineHZ

5 years, 1 month ago

B is the correct answer

upvoted 1 times

...

milind8451

5 years, 1 month ago

TestDev user role have rights to create VMs, you can assign a policy and restrict them to use a specific template to create VMs. A) Yes should be right ans. https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-add-devtest-user https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-set-lab-policy

upvoted 6 times

FloJoe

5 years ago

You gave the best reference to explain why it is answer B) and not A) Check your reference: https://docs.microsoft.com/en-us/azure/devtest-labs/devtest-lab-set-lab-policy which explains, that you can apply a policy (setting) for users to create VMs. However, these settings are not equivalent of giving the users the option to create VMs using Azure Resource Manager Templates. Hence, the Solution is B)

upvoted 5 times

...

milind8451

4 years, 5 months ago

My bad, Ans should be No, because Dev-Test user role will give rights to create VMS in Test lab but to create VMs using a specific template you need a policy that isn't mentioned here.

upvoted 2 times

...

Rajuuu

5 years, 2 months ago

Its B…DevTestLab can only Start , Stop a VN and not create a VM and other resource .Only a Contributor role can Create new resource include VM in the RG.

upvoted 8 times

reddy98321

4 years, 12 months ago

VM can be created. please refer : https://docs.microsoft.com/en-us/azure/devtest-labs/devtest-lab-add-devtest-user

upvoted 7 times

...

Load full discussion...