Exam AZ-103 topic 5 question 22 discussion

I think it should be: Box 1: User1 and User3 Box 2: User1 only

Given answers are correct ???? I think it should be Box 1: User1 and User3 Box 2: User1 only

I am so sure about the right answers now. They are: Box1: User1 & User 3 https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#network-contributor Box2: User1, User2 & User3 https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#security-admin

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles Box1, answer should be User1 (owner) only, caust owner has full right in role and resource management; Box2, answer should be User1 (owner) and User3 (security admin), cause security admin can view and update permissions for Security Center, same permissions as the Security Reader role and can also update the security policy and dismiss alerts and recommendations. Therefore, the answer for this question is correct!

Agree with michel Box 1: User1 and User3 Box 2: User1 only

Box1: User1,3 and Box2 User1

Box 1: 1 & 3. Network Contributor can create and manage Network. Subnet is a network. Ref: Microsoft.Network/* Create and manage networks https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#network-contributor Box: 1 & 2. As Security Admin can read and assign the role. Ref: Read Role and Role Assignment https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#security-admin

Box 1 : User 1 & User 3 Box 2 : User 1 & User 2

Uh, yea. Box 1: User 1 and User 3 / Box 2: User 1 only

Box 1: 1 and 3 Box 2 : 1 Security Admin : View and update permissions for Security Center. Same permissions as the Security Reader role and can also update the security policy and dismiss alerts and recommendations. https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

I agree with User1 & User3 User1 Only

Add subnet to Vnet1. : Microsoft.Network/virtualNetworks/subnets/write role is part of Network Contributor. So both User1 and User3 will be able to add subnets Assign User to reader role: Security Admin can not assign Roles through Azure role assignments. so only User1 is the answer here

Correct Network Contributor let you manage network but not access them

User1 & User3 User1 Only

Box 1: User1 and User3 Box 2: User1 only

1) Tried and tested Network contributor cant add a new subnet. so only owner can do it. But I failed to understand why its is not allowed . 2) User can be given read permissions by only owner in this case

Network contributor CAN’T add sunets