Exam AZ-204 All Questions

View all questions & answers for the AZ-204 exam

Exam AZ-204 topic 4 question 1 discussion

Actual exam question from Microsoft's AZ-204

Question #: 1
Topic #: 4

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra
API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers.
The Azure AD group must not be able to access the keys that are required to access the data.
You need to restrict access to the Azure AD group.
Which role-based access control should you use?

A. DocumentDB Accounts Contributor
B. Cosmos Backup Operator
C. Cosmos DB Operator
D. Cosmos DB Account Reader

Show Suggested Answer

Suggested Answer: C 🗳️

by RaviKS at Dec. 24, 2020, 8:10 a.m.

Comments

Submit Cancel

mlantonis

Highly Voted 4 years, 2 months ago

Correct Answer: C DocumentDB Account Contributor: Can manage Azure Cosmos DB accounts. Cosmos Backup Operator: Can submit a restore request for Azure portal for a periodic backup enabled database or a container. Can modify the backup interval and retention on the Azure portal. Cannot access any data or use Data Explorer. Cosmos DB Operator: Can provision Azure Cosmos accounts, databases, and containers. Cannot access any data or use Data Explorer. Cosmos DB Account Reader: Can read Azure Cosmos DB account data. CosmosRestoreOperator: Can perform restore action for Azure Cosmos DB account with continuous backup mode. Reference: https://docs.microsoft.com/en-us/azure/cosmos-db/role-based-access-control

upvoted 61 times

OPT_001122

2 years, 12 months ago

very good and helpful explanation

upvoted 2 times

...

SachinV

1 year, 8 months ago

looks correct, in Nov182023, scored 962

upvoted 1 times

...

RaviKS

Highly Voted 4 years, 7 months ago

Answer is correct

upvoted 38 times

...

J_obando13

Most Recent 3 months ago

Selected Answer: C

Got this in the exam today! May 15, 2025. Went most voted. 940/1000. 50 of 51 from examtopics. Cases Munson’s Pickles and Preserves Farm (7) and Fourth Coffee (3)

upvoted 1 times

...

overhill

9 months, 2 weeks ago

Roles https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles?context=%2Fazure%2Fcosmos-db%2Fnosql%2Fsecurity%2Fcontext%2Fcontext#databases

upvoted 1 times

...

Vichu_1607

10 months ago

Selected Answer: C

Cosmos DB Operator

upvoted 1 times

...

Vichu_1607

10 months, 1 week ago

Selected Answer: A

DocumentDB Account Contributor:

upvoted 1 times

...

Vichu_1607

10 months, 1 week ago

Answer is C

upvoted 1 times

...

azpardha

1 year, 4 months ago

Got this on 04/07/2024, Went with highly voted answer, scored:820

upvoted 2 times

...

Woksi

1 year, 6 months ago

Got on 07/02/2024

upvoted 1 times

...

richardc7

1 year, 10 months ago

got 28/09/2023

upvoted 1 times

...

richardc7

1 year, 10 months ago

got on 28/09/2023

upvoted 1 times

...

mihailos

1 year, 11 months ago

Got it in exam 28/08/23. Went with proposed answer. Scored 912

upvoted 2 times

...

basquiat

2 years ago

Got this one in 2023-08-08

upvoted 3 times

...

JH81

2 years, 1 month ago

Selected Answer: C

Got this on 6/28/2023 and passed with 850. Went with answer.

upvoted 3 times

...

aragones

2 years, 3 months ago

Got this 2023-05-12. My case: case: You need to configure authorization. case: You need to ensure the app does not time out and processes the blob data case study: VanArsdel Inc Canada

upvoted 2 times

...

[Removed]

2 years, 4 months ago

Got this in exam today (5 April 2023)

upvoted 1 times

...

Esward

2 years, 6 months ago

Given answer is correct https://azure.microsoft.com/en-us/updates/azure-cosmos-db-operator-role-for-role-based-access-control-rbac-is-now-available/

upvoted 2 times

...

Load full discussion...