Exam DP-420 topic 5 question 10 discussion

Actual exam question from Microsoft's DP-420

Question #: 10
Topic #: 5

You have a container named container1 in an Azure Cosmos DB Core (SQL) API account.
You need to provide a user named User1 with the ability to insert items into container1 by using role-based access control (RBAC). The solution must use the principle of least privilege.
Which roles should you assign to User1?

A. CosmosDB Operator only
B. DocumentDB Account Contributor and Cosmos DB Built-in Data Contributor
C. DocumentDB Account Contributor only
D. Cosmos DB Built-in Data Contributor only

Show Suggested Answer

Suggested Answer: D 🗳️

by lakime at May 10, 2022, 12:12 p.m.

Comments

Submit Cancel

Billy_inat

Highly Voted 11 months, 2 weeks ago

Selected Answer: D

Answer is D

upvoted 9 times

...

janisk

Highly Voted 11 months, 2 weeks ago

Selected Answer: D Cosmos DB Built-in Data Contributor https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-setup-rbac

upvoted 5 times

...

khushbu123

Most Recent 10 months, 1 week ago

Selected Answer: D

It should be D

upvoted 2 times

...

TimSss

10 months, 1 week ago

Like the answer text says, db operator can do much more than just insert items

upvoted 1 times

...

essdeecee

10 months, 3 weeks ago

Selected Answer: D

Supplied answer Cosmos DB Operator : Can provision Azure Cosmos accounts, databases, and containers. Cannot access any data or use Data Explorer. Cosmos DB Built-in Data Contributor Microsoft.DocumentDB/databaseAccounts/readMetadata Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/* Cosmos DB Built-in Data Contributor contains Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/* for read/replace/upsert/delete

upvoted 3 times

...

lakime

1 year, 2 months ago

Selected Answer: C

DocumentDB Account Contributor as Cosmos DB Operator Can provision Azure Cosmos accounts, databases, and containers. Cannot access any data or use Data Explorer.

upvoted 2 times

...