Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
No, a user with the Storage Account Contributor role in Azure cannot create new storage accounts. However, they can manage classic storage accounts. Explanation The Avere Contributor role in Azure allows users to create and manage storage accounts. The Storage Account Contributor role in Azure only allows users to manage classic storage accounts. The Contributor role in Azure allows users to create and manage resources, but not set access controls or manage billing. Users can assign Azure roles at the level of the subscription, resource group, storage account, or container.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I think NNY...but it seems that Storage Account Contributor is able to create Storage Account: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/storage#storage-account-contributor "Microsoft.Storage/storageAccounts/* Create and manage storage accounts" So Y/N/Y
No, a user with the Storage Account Contributor role in Azure cannot create new storage accounts. However, they can manage classic storage accounts. Explanation The Avere Contributor role in Azure allows users to create and manage storage accounts. The Storage Account Contributor role in Azure only allows users to manage classic storage accounts. The Contributor role in Azure allows users to create and manage resources, but not set access controls or manage billing. Users can assign Azure roles at the level of the subscription, resource group, storage account, or container.
Correct Answers. YES, No, Yes (YES)User1 can create a storage account in RG1, since User1 has Storage Account Contribute Role inherited from Resource Group. (NO) User1 can NOT modify the DNS settings of networkinterface1, since it requires Network Contribute role referring to the following link. https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface?tabs=network-interface-portal#permissions (YES) User1 can create an inbound security rule to filter inbound traffic to networkinterface1, since User1 has Contributor role for NSG1