Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft AZ-104 Exam - Topic 4 Question 77 Discussion

Actual exam question for Microsoft's AZ-104 exam
Question #: 77
Topic #: 4
[All AZ-104 Questions]

You have 15 Azure subscriptions.

You have an Azure AD tenant that contains a security group named Group1.

You plan to purchase additional Azure subscriptions.

You need to ensure that Group1 can manage role assignments for the existing subscriptions and the planned subscriptions. The solution must meet the following requirements:

* Use the principle of least privilege.

* Minimize administrative effort.

What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: C

Contribute your Thoughts:

0/2000 characters
Veta
4 months ago
Option B gives too much power, not a fan of that one.
upvoted 0 times
...
Adela
5 months ago
I’m surprised people are leaning towards A, isn’t that too restrictive?
upvoted 0 times
...
Brett
5 months ago
Wait, why not just go with option C? Seems safer.
upvoted 0 times
...
Junita
5 months ago
Definitely agree with A, it keeps things simple!
upvoted 0 times
...
Kenneth
5 months ago
I think option A is the best choice for least privilege.
upvoted 0 times
...
Cortney
5 months ago
I’m a bit confused about the roles, but I think the User Access Administrator role is more aligned with managing role assignments without overstepping.
upvoted 0 times
...
Elly
5 months ago
I practiced a similar question where we had to minimize admin effort, and I think creating a new management group could help with that.
upvoted 0 times
...
Hortencia
5 months ago
I'm not entirely sure, but I feel like assigning the Owner role for the root management group could give too much access.
upvoted 0 times
...
Luke
5 months ago
I remember we discussed the principle of least privilege, so I think assigning Group1 the User Access Administrator role might be the right approach.
upvoted 0 times
...
Sonia
6 months ago
Hmm, this one's tricky. I'll need to think through the different billing options for Snowflake credits.
upvoted 0 times
...
Dorthy
6 months ago
This is a good one. I'll need to draw on my knowledge of Spring auto-configuration and think through the different scenarios presented in the options.
upvoted 0 times
...
Denise
6 months ago
This seems like a straightforward question about segregation of duties. I'll need to think through the different duties mentioned and consider which combination would provide the best opportunity for fraud.
upvoted 0 times
...
Ayomide Oluwaga
3 years ago
Answer is correct. Since group 1 needs to have access to previous subscriptions as well as new ones, creating a new management group is extra effort. Also the Owner role will eliminate the principle of least priviledge since that will not only give full control over the users but also over every aspect of the subscription including billing. User access will satisfy the goal.
upvoted 1 times
...

Save Cancel