ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-300 All Questions

View all questions & answers for the AZ-300 exam
Go to Exam

Exam AZ-300 topic 2 question 15 discussion

Actual exam question from Microsoft's AZ-300
Question #: 15
Topic #: 2
[All AZ-300 Questions]

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.
Subscription1 has a user named User1. User1 has the following roles:
✑ Reader
✑ Security Admin
✑ Security Reader
You need to ensure that User1 can assign the Reader role for VNet1 to other users.
What should you do?

  • A. Assign User1 the Owner role for VNet1.
  • B. Assign User1 the Network Contributor role for VNet1.
  • C. Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.
  • D. Remove User1 from the Security Reader and Reader roles for Subscription1.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Minimal1988 at Feb. 14, 2020, 3:02 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
NapoleonBorntoparty
Highly Voted 5 years, 1 month ago
in the exam I just took it said User Administrator instead of Owner
upvoted 18 times
...
sami777
Highly Voted 4 years, 10 months ago
In exam you will get these options and B is the answer A. Assign User1 the Network Contributor role for RG1. B. Assign User1 the User Access Administrator role for VNet1. C. Remove User1 from the Security Reader and Reader roles for Subscription1. D. Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.
upvoted 14 times
sami777
4 years, 10 months ago
https://www.examtopics.com/discussions/microsoft/view/23466-exam-az-103-topic-16-question-74-discussion/
upvoted 3 times
...
...
Ssssaaahh
Most Recent 4 years, 9 months ago
A is Correct
upvoted 1 times
...
MMohammad
4 years, 9 months ago
The correct answer is: A. Assign User1 the Owner role for VNet1.
upvoted 1 times
...
BOC
4 years, 9 months ago
A is the correct answer
upvoted 2 times
...
colinquek
4 years, 9 months ago
Seems like "A" referring to: https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal#prerequisites To add or remove role assignments, you must have: Microsoft.Authorization/roleAssignments/write and Microsoft.Authorization/roleAssignments/delete permissions, such as User Access Administrator or Owner
upvoted 3 times
...
gboyega
4 years, 11 months ago
A is Correct
upvoted 4 times
gboyega
4 years, 11 months ago
Only the owner can grant role assignment to others
upvoted 5 times
...
...
Prash85
5 years ago
Remember when Microsoft has no conditions specified than it will have two objectives. 1. Principle of least privilege. 2. Cost effective design.
upvoted 2 times
...
kondapaturi
5 years ago
A is correct
upvoted 7 times
...
Minimal1988
5 years, 4 months ago
B is currect.
upvoted 1 times
Myk
5 years, 4 months ago
Wrong. If you just give it Network Contributor role for Vnet1 the addrole / add co administrator functionality is disabled.
upvoted 8 times
Minimal1988
5 years, 4 months ago
You are right! Sorry my mistake
upvoted 4 times
tartar
4 years, 9 months ago
A is ok
upvoted 2 times
...
...
kb88
4 years, 11 months ago
but the question is to assign Reader role to others, which makes B as an answer ( least privilege!? )
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel