exam questions

Exam DP-300 All Questions

View all questions & answers for the DP-300 exam

Exam DP-300 topic 17 question 1 discussion

Actual exam question from Microsoft's DP-300
Question #: 1
Topic #: 17
[All DP-300 Questions]

HOTSPOT -
You are evaluating the role assignments.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: No -
DBAGroup1 is member of the Contributor role.
The Contributor role grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries.

Box 2: No -
Contributor - Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC
SQL DB Contributor - Lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers.

Box 3: Yes -
DBAGroup2 is member of the SQL DB Contributor role.
The SQL DB Contributor role lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers. As a member of this role you can create and manage SQL databases.
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Jeembeem
Highly Voted 2 years, 8 months ago
Proposed answer is wrong. The correct answer is: NO - with contributor you cannot access database, you can only manage them (except for security) NO (contributor cannot manage security) YES (since you have this permission on each logical server, you can create database)
upvoted 27 times
STH
2 years, 4 months ago
NO, permission is only on THIS logical server. The group has no right to create databases on another server (unless there is more privileges that are not shown here) so NO, NO, NO
upvoted 3 times
STH
2 years, 4 months ago
Said nothing... I missed to see that this privileges are granted on each server... so third answer is Yes
upvoted 2 times
uzairahm
1 year, 3 months ago
The Case Study states "For each customer’s Azure SQL Database server, you plan to assign the roles shown in the following exhibit"
upvoted 1 times
...
...
...
...
mark9999
Highly Voted 2 years, 8 months ago
Microsoft states that the following rules apply: Contributor - Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC SQL DB Contributor - Lets you manage SQL databases, but not access to them. Also, you can't manage their security-related policies or their parent SQL servers. Answer looks good from this perspective: Yes-No-Yes
upvoted 12 times
...
amazonalex
Most Recent 7 months, 2 weeks ago
Yes No Yes
upvoted 1 times
...
reachmymind
1 year, 8 months ago
Yes No Yes Given answer is correct
upvoted 2 times
...
jerkyflexoff
2 years ago
Answer is correct Yes No Yes. Contributor can do everything apart from change permissions on other users accounts.
upvoted 2 times
...
jerkyflexoff
2 years ago
There is so much uncertainty in these questions, it goes to show how much of a shit show azure is.
upvoted 9 times
...
Kishorepi
2 years, 6 months ago
No, No, Yes Contributor - Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC. All these permissions are to make changes to the database setting at Azure Portal level. For the user to connect to database using SSMS/Data Studio to perform any tasks at database level, user/group need to be given permissions by Admin first.
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...