Azure quiz

Azure Access Control Quiz

Test your knowledge on Azure access management and gain a deeper understanding of Azure roles and permissions. This quiz features 11 carefully crafted questions that will challenge your expertise in managing resources in Azure.

Key topics covered include:

Access control in resource groups
Role assignments and permissions
Azure Active Directory roles
Creating virtual machines via script

11 Questions3 MinutesCreated by ManagingCloud57

1. Suppose a team member can't view resources in a resource group. Where would the administrator go to check the team member's access?

Check the team member's permissions by going to their Azure profile > My permissions.

Go to the resource group and select Access control (IAM) > Check Access.

Go to one of the resources in the resource group and select Role assignments.

2. Suppose an administrator in another department needs access to a virtual machine managed by your department. What's the best way to grant them access to just that resource?

At the resource scope, create a role for them with the appropriate access.

At the resource group scope, assign the role with the appropriate access.

At the resource scope, assign the role with the appropriate access.

3. Suppose a developer needs full access to a resource group. If you are following least-privilege best practices, what scope should you specify?

Resource

Resource group

Subscription

4. Suppose an administrator needs to generate a report of the role assignments for the last week. Where in the Azure portal would they generate that report?

Search for Activity log and filter on the Create role assignment (roleAssignments) operation.

At the appropriate scope, go to Access control (IAM) > Download role assignments.

At the appropriate scope, go to Access control (IAM) > Role assignments.

5. There are three virtual machines (VM1, VM2, and VM3) in a resource group. The Helpdesk hires a new employee. The new employee must be able to modify the settings on VM3. The employee must not be able to make changes on VM1 and VM2. Which of following meets the requirements and minimizes administrative overhead?

Assign the user to the Contributor role on the resource group.

Assign the user to the Contributor role on VM3.

Move VM3 to a new resource group and assign the user to the Owner role on VM3.

6. What's the main difference between Azure roles and Azure Active Directory roles?

Azure roles apply to Azure resources. Azure AD roles apply to Azure AD resources such as users, groups, and domains.

Azure roles can be assigned at the root level.

Azure AD roles are used to manage access to Azure resources.

7. What is included in a custom Azure role definition?

Operations allowed for Azure resources and the scope of permissions

The assignment of a custom role

Actions and DataActions operations scoped to the tenant level

8. Suppose you're an administrator of several Azure virtual machines. You get a text message indicating some problems with your VMs. You are at a friend’s house and only have your tablet with you. True or false: you'll still be able to access the Azure CLI using the tablet, even though you can't install the CLI on it.

True

False

9. Suppose you have a script that creates several VMs with different images. When the script issues the command to create the first VM you do not want to block the script while the VM is created, instead you want the script to immediately move on to the next command. What is the best way to do this?

Add the '--async' argument to your create command.

Use the ampersand (&) to run the process in the background.

Add the '--no-wait' argument to your create command.

10. Most Azure commands return JSON by default. Sometimes this data set can be very large which makes it difficult to read and tricky to use the result of one command as input to another command. What can you use with Azure CLI to filter the results to get only the data that you need?

You can use the '--query' argument.

You can use the '--filter' argument.

You can pipe the results to a JSON parsing utility and use filtering capability there.

Azure quiz

Azure Access Control Quiz

More Quizzes