Manage Access to Azure Resources AZ-104 Practice Questions (Page 4)

Questions 16–17

1. 16foundation · easy

   A user has the Reader role on a resource group and the Contributor role on a virtual machine within that resource group. What is the user's effective permission on the virtual machine?

   • AContributor only
   • BNo access
   • CReader and Contributor combined
   • DReader only
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   You have a resource group named 'RG1' that contains a virtual network and a storage account. A user is assigned the Reader role at the subscription level. The user is also assigned the Contributor role on the storage account. What are the user's effective permissions on the virtual network?

   • AThe user has no permissions on the virtual network because the Reader role at the subscription scope is overridden by the Contributor role on the storage account.
   • BThe user has Contributor permissions on the virtual network because the effective permissions are the union of all role assignments.
   • CThe user has Reader permissions on the virtual network because the Reader role at the subscription scope is inherited, and the Contributor role on the storage account does not apply to the virtual network.
   • DThe user has Contributor permissions on the virtual network because the Contributor role on the storage account also applies to the virtual network.
   Reveal Solution Discussion Select an answer first