Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam

Exam AZ-303 topic 2 question 34 discussion

Actual exam question from Microsoft's AZ-303

Question #: 34
Topic #: 2

HOTSPOT -
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1.
You add the users in the following table.

Which user can perform each configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: User1 only.
User1: The Owner Role lets you manage everything, including access to resources.
Not User3: The Network Contributor role lets you manage networks, but not access to them.

Box 2: User1 and User2 only -
The Security Admin role: In Security Center only: Can view security policies, view security states, edit security policies, view alerts and recommendations, dismiss alerts and recommendations.
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

by mookow at Jan. 2, 2021, 5:13 a.m.

Comments

Submit Cancel

mookow

Highly Voted 4 years, 5 months ago

Box 1: Should be User 1 and 3 Box 2: Should be User 1

upvoted 227 times

medi01

3 years, 10 months ago

Why not Security Admin?

upvoted 1 times

Ajdlfasudfo0

3 years, 8 months ago

you are mixing up security admin with useracess admin

upvoted 3 times

...

Sylvam1010

3 years, 2 months ago

correct

upvoted 1 times

...

jasu

Highly Voted 4 years, 5 months ago

User1 and 3 for adding a subnet User1 for assigning an access/role

upvoted 53 times

...

sandeepmalik

Most Recent 3 years, 2 months ago

In today's exam. Score 900+ Correct answer. User1 and User 3 User 1

upvoted 1 times

...

nd78

3 years, 4 months ago

on Exam today 21st Jan, 2022

upvoted 2 times

...

plmmsg

3 years, 5 months ago

Box1 : user 1 and 3 Box2 : user 1

upvoted 1 times

...

tomatosis

3 years, 5 months ago

On exam 23 Dec 2021, I chose Box 1: Should be User 1 and 3 Box 2: Should be User 1. This was confirmed with my trainer previously.

upvoted 4 times

...

donathon

3 years, 7 months ago

Add a subnet to vnet1: User 1 and User 3. User 1 is an owner so has all the rights. User 3 is a network contributor that can create and manage networks (Microsoft.Network/*). Security Admin cannot manage the vnet. Assign a user to reader role on vnet1: User 1 should be able to manage role but user 1. User 2 cannot manage network while User3 only has read access (Microsoft.Authorization/*/read).

upvoted 3 times

...

eder_jsos

3 years, 8 months ago

Box 1: User 1 and User 3 Box 2: User 1

upvoted 5 times

...

syu31svc

3 years, 9 months ago

I disagree with the answer given Both owner and network contributor have access to add a subnet to a Virtual network. Security admin RBAC role does not provide access to add virtual network. https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#security-admin Only owner can assign roles. Owner role has full access to manage all resources, including the ability to assign roles in Azure RBAC. https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#all Box 1 -> User 1 and 3 Box 2 -> User 1

upvoted 4 times

...

jd94

4 years ago

6/12/2021. Passed the exam. Add a subnet - Owner/Network Cont Add a reader - Owner

upvoted 18 times

heamgu

3 years, 12 months ago

Thank you!

upvoted 1 times

...

betamode

4 years ago

Box 1: Should be User 1 and 3 Box 2: Should be User 1 I've tested that in my own lab. In fact, users who are assigned Security Admin role OR Contributor role can't even access the role assignment box / button on Azure portal. Role assignment button / box has been grayed out for users with these 2 roles.

upvoted 7 times