Exam AZ-103 topic 16 question 28 discussion

Actual exam question from Microsoft's AZ-103

Question #: 28
Topic #: 16

HOTSPOT -
You have an Azure subscription named Subscription1 that contains a resource group named RG1.
In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2.
You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege.
Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer: Explanation

by deepu1207 at March 19, 2020, 6:10 a.m.

Comments

Submit Cancel

chernang3

Highly Voted 5 years, 2 months ago

https://www.examtopics.com/exams/microsoft/az-103/view/18/ Question 2

upvoted 5 times

praveen97

4 years, 11 months ago

To add to the backend pool, write permission is required on the Resource Group because it writes deployment information. So the answer is Network Contributor on RG1 * Note* permission is also required on the resource group of any added NIC, but that is outside the scope of the question. To add a probe, just Network Contributor on the load balancer is required. (Although permission on the VNET is also required, but that also seems to be outside of the scope of the question) So the thing is, once you give Admin1 Network Contributor on RG1, assigning Network contributor permission to the public load balancer is unnecessary. So, the answers are To add a backend pool to LB1 - Network Contributor on RG1 To add a health probe to LB2 - Network Contributor on RG1

upvoted 4 times

...