Exam AZ-300 All Questions

View all questions & answers for the AZ-300 exam

Exam AZ-300 topic 1 question 67 discussion

Actual exam question from Microsoft's AZ-300

Question #: 67
Topic #: 1

HOTSPOT -
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. You add the users in the following table.

Which user can perform each configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer: Explanation
Box 1: User1 and User3 only.
The Owner Role lets you manage everything, including access to resources.
The Network Contributor role lets you manage networks, but not access to them.

Box 2: User1 and User2 only -
The Security Admin role: In Security Center only: Can view security policies, view security states, edit security policies, view alerts and recommendations, dismiss alerts and recommendations.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

by MaheshBeeravelli at Nov. 17, 2019, 1:58 p.m.

Comments

Submit Cancel

Shiven

Highly Voted 5 years, 4 months ago

Box1: Which of the following user/users would be able to add a subnet to the virtual network? User 1 & User 3 Box 2: Which of the following user/users would be able to add the Reader role to the virtual network? User 1

upvoted 45 times

Russel

5 years, 3 months ago

Shiven is correct .I tried in lab security admin can't add reader role in virtual network.

upvoted 4 times

jamesej_2020

4 years, 12 months ago

there is no such thing as network contributor role in azure portal. when i went there i only see network administrator

upvoted 1 times

Gman80

4 years, 11 months ago

@jamesej_2020 maybe you should study more https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#network-contributor

upvoted 4 times

ct84

4 years, 9 months ago

hah! :D

upvoted 1 times

...

jamesej_2020

4 years, 12 months ago

there is no such thing as network contributor role in azure portal. when i went there i only see network administrator

upvoted 1 times

ct84

4 years, 9 months ago

it's a shame you can't delete comments..

upvoted 2 times

...

leaderbud

4 years, 7 months ago

All the roles are defined here guys: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles For the common ones: Owner = Grants full access to manage all resources, including the ability to assign roles in Azure RBAC. Contributor = Grants full access to manage all resources, but does NOT allow you to assign roles in Azure RBAC. (you cannot add users or changes their rights) User Access Administrator = Lets you manage user access to Azure resources. Reader = View all resources, but does not allow you to make any changes. Security Admin = View and update permissions for Security Center. Same permissions as the Security Reader role and can also update the security policy and dismiss alerts and recommendations. Network Contributor = Lets you manage networks, but not access to them. (so you can add VNET, subnet, etc)

upvoted 1 times

...

Isu

Highly Voted 5 years, 7 months ago

For question 2, it will be User 1 only. Security admin can't add other users

upvoted 18 times

jamesej_2020

4 years, 12 months ago

there is no such thing as network contributor role in azure portal. when i went there i only see network administrator

upvoted 1 times

X_L

4 years, 11 months ago

The Network Contributor role is very much alive and well in the Azure Portal; in fact, it is one of the 4 core RBAC roles.

upvoted 2 times

...

praveen97

4 years, 11 months ago

correct, tested it in the lab.

upvoted 1 times

praveen97

4 years, 11 months ago

For question 1, it is User1 and User3. For question 2, it is User1 only.

upvoted 1 times

sami777

4 years, 10 months ago

@praveen97 you mean Box 1 and Box 2.

upvoted 1 times

...

SilverFox

5 years, 4 months ago

Box1: User 1 & User 3 Box2: User 1

upvoted 31 times

jamesej_2020

4 years, 12 months ago

there is no such thing as network contributor role in azure portal. when i went there i only see network administrator

upvoted 2 times

tartar

4 years, 9 months ago

Add a subnet to VNET1 - U1 & U3 Assign a user Reader Role to VNET1- U1

upvoted 1 times

...

Shailen

4 years, 4 months ago

Absolutely correct as tested on the lab. box1: Both owner and network contributor can add a subnet. So answer is user 1 and 3. box2: Neither network contributor nor security admin can add any new role. So answer is user 1

upvoted 2 times

...

RasiR

Most Recent 4 years, 6 months ago

Add, change, or delete a virtual network subnet - The account you sign in to, or connect to Azure with, must be assigned to the Network contributor role role or to a Custom role that's assigned the appropriate actions listed in Permissions. Refer: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-subnet Box1: User1 and User 3 only Box2: User1 only

upvoted 1 times

...

Kharal

4 years, 7 months ago

tested on Azure portal. only owner user could do both tasks. Sec Admin and Network Admin couldn't even see the Resource group on the portal. shouldn't be answer user 1 only for both tasks?

upvoted 1 times

...

A201sss201

4 years, 9 months ago

as per below link first box is user1 and and second box is User1, User2 and User3

upvoted 1 times

...

Jend

4 years, 10 months ago

Contributor Role = Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC. This means it can add a subnet to the VNet. This means user 1 and user 3 for the first box. Box 2. It is only the user 1 that can assign a role. so it is User 1 only. my problem starts with microsoft providing an answer in the first box. user 1 only user 3 only user 1 and 2 user 2 and 3 user 1, user 2, user 3. in box one none of the choice can fully answer unless you choose only user 1... what can we do?

upvoted 1 times

...

azureexam

4 years, 11 months ago

i dont see any box

upvoted 1 times

sami777

4 years, 10 months ago

ttps://www.itexams.com/static/img/exams/Microsoft-AZ-300-1.0/xmlfile-259_1.jpg

upvoted 4 times

...

gboyega

4 years, 11 months ago

a) USER 1 and 3 b) USER 1

upvoted 5 times

...

DeveshSolanki

4 years, 11 months ago

• Add a subnet to VNET1 - U1 & U3 • Assign a user Reader Role to VNET1- U1

upvoted 2 times

...

AnshMan

5 years, 1 month ago

For security admin, VNETs are not even visible to do anything. For network contributor, Add role is greyed out. Box1: User1 & User3 Box2: User1 only I have tested in my lab the above.

upvoted 6 times

jamesej_2020

4 years, 12 months ago

there is no network contributor role , what i can see in Azure portal is network administrator.

upvoted 1 times

Gman80

4 years, 11 months ago

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#network-contributor Read

upvoted 2 times

...

SIDNEY1

5 years, 1 month ago

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles Check the link above. Box 1 is User 1 and User 3 only Box 2 is User 1 only

upvoted 4 times

...

Pigi_102

5 years, 1 month ago

User1 and User3 for Box1 ( Owner have all privileges and Network Contributor can create and manage resources but not access so creation is possible ) User1 only on Box2 ( Security admin an view and uodate permission, not create ).

upvoted 5 times

...