HOTSPOT –
You have an Azure subscription named Subscription1 that contains a resource group named RG1.
In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2.
You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege.
Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
You have an Azure subscription named Subscription1 that contains a resource group named RG1.
In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2.
You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege.
Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
The Network Contributor role lets you manage networks, but not access them.
Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
- Network Contributor on RG1 for LB1 to add a backend pool (vms must be in place)
- Network Contributor on RG1 for LB2 to add health probe
The Network Contributor role lets you manage networks, but not access them.
Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles