ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-103 All Questions

View all questions & answers for the AZ-103 exam
Go to Exam

Exam AZ-103 topic 16 question 17 discussion

Actual exam question from Microsoft's AZ-103
Question #: 17
Topic #: 16
[All AZ-103 Questions]

HOTSPOT -
You have an Azure subscription named Subscription1 that contains a resource group named RG1.
In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2.
You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege.
Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer: Explanation
by Marz at Oct. 27, 2019, 11:43 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
eb2019
Highly Voted 5 years, 4 months ago
The requested task is: 1. add a backend pool to LB1 2. add a probe to LB2 Answer is: 1. Network Contributer role on LB1 2. Network Contributer role on LB2
upvoted 12 times
...
Eggsamine
Highly Voted 4 years, 9 months ago
Repeat of Topic 4, question 2: https://www.examtopics.com/exams/microsoft/az-103/view/18/
upvoted 8 times
...
Sunnyb
Most Recent 2 years, 5 months ago
I can't see the answer options, not sure why. Am I missing something
upvoted 1 times
...
PretoBruno
4 years, 11 months ago
The solution must follow the principle of least privilege: To add a LoadBalancer Probe you only need the network contributor role on the LB. To add a backend pool, you need network contributor role on the LB AND the VMs that will be part of the backend pool, for this reason the network contributor role for this action must eb assigned to the RG where the LB and the VM resides.
upvoted 3 times
...
redboris
5 years, 2 months ago
The possible answers for "to add a backend pool to LB1" are: Contributor on LB1 Network Contributor on LB1 Network Contributor on RG1 Owner on LB1 The possible answers for "to add a health probe on LB2" are: Contributor on LB2 Network Contributor on LB2 Network Contributor on RG1 Owner on LB2 Based on this website: https://issuu.com/certqueendumps/docs/az-103_72a85c38657274 They suggest the following answers: - Network Contributor on LB1 - Network Contributor on LB2
upvoted 4 times
sany
4 years, 9 months ago
******to add a backend pool to LB1, you need permission on network interface of VM so Network Contributor on RG1******* It update the properties of net interface with LoadBalancer Name
upvoted 1 times
...
...
andreww
5 years, 3 months ago
Correct Answer is: To Add a backend pool to LB1: Network Contributor on LB1 To Add a backend pool to LB2: Network Contributor on LB2
upvoted 4 times
Cloudyuga
4 years, 11 months ago
yes this is correct answer
upvoted 1 times
...
...
cybrtrk
5 years, 3 months ago
it depends if you're choosing a built-in role or creating a custom role. if it's built in, the closest is probably Network Contributor. if it's custom, the permissions of least privilege would be something like: Microsoft.Network/loadBalancers/*
upvoted 3 times
...
redondo310
5 years, 3 months ago
Key words here are "can manage LB1 and LB2. Reader role would not allow you to manage. . The answer seems to be Network Contributor.
upvoted 5 times
...
Marz
5 years, 6 months ago
we should add the admin to the Reader Role for the RSG the LBs are in and also add the user to the Network Contributor role. Ref: https://azidentity.azurewebsites.net/post/2018/11/08/contributor-role-not-allowing-users-to-modify-azure-resources
upvoted 7 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago