You need to grant a user the ability to manage virtual machines in a resource group. Which Azure RBAC components must you specify when creating the role assignment?

Subscription, resource group, and security principal

Resource group, location, and role definition

Security principal, role definition, and scope

Role definition, scope, and policy definition

When you view the effective permissions for a user in the Azure portal, which of the following is true?

It shows the combined permissions from all role assignments that apply to the user, including inherited ones.

It shows the permissions the user would have if they were a member of all groups.

It shows only the role assignments that were explicitly assigned to the user.

It shows the permissions that are denied to the user.

Which of the following is a best practice for managing Azure role assignments?

Assign the Owner role to all users to avoid permission issues.

Assign roles to individual users to ensure each person has exactly the permissions they need.

Assign roles to groups and add users to the groups to simplify permission management.

Assign roles at the subscription scope to ensure users have access to all resources.

Microsoft Certified:Azure Administrator Associate

Domain 1Objective 2

Manage Access to Azure Resources AZ-104 Practice Questions (Page 1)

Part of the Manage Azure identities and governance domain, which accounts for 20–25% of the AZ-104 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

6concepts

20–25%of the exam

Questions 1–5

1foundation · easy
You need to grant a user the ability to manage virtual machines in a resource group. Which Azure RBAC components must you specify when creating the role assignment?
Select an answer first
2foundation · easy
When you view the effective permissions for a user in the Azure portal, which of the following is true?
Select an answer first
3foundation · easy
Which of the following is a best practice for managing Azure role assignments?
Select an answer first
4application · easy
You need to grant a team of database administrators the ability to manage SQL databases in a specific resource group, but they should not be able to manage any other resource type in that resource group. Which built-in role should you assign at the resource group scope?
Select an answer first
5foundation · easy
Which built-in Azure role is designed to grant read-only access to all resources in a scope, but does not allow creating, deleting, or modifying any resources?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-104

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-104” is a trademark of its owner, used for identification only.

Manage Access to Azure Resources AZ-104 Practice Questions (Page 1)

Questions 1–5

You need to grant a user the ability to manage virtual machines in a resource group. Which Azure RBAC components must you specify when creating the role assignment?

When you view the effective permissions for a user in the Azure portal, which of the following is true?

Which of the following is a best practice for managing Azure role assignments?

You need to grant a team of database administrators the ability to manage SQL databases in a specific resource group, but they should not be able to manage any other resource type in that resource group. Which built-in role should you assign at the resource group scope?

Which built-in Azure role is designed to grant read-only access to all resources in a scope, but does not allow creating, deleting, or modifying any resources?

Keep studying — Manage Azure identities and governance