Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-104 Exam - Topic 4 Question 77 Discussion

You have 15 Azure subscriptions.You have an Azure AD tenant that contains a security group named Group1.You plan to purchase additional Azure subscriptions.You need to ensure that Group1 can manage role assignments for the existing subscriptions and the planned subscriptions. The solution must meet the following requirements:* Use the principle of least privilege.* Minimize administrative effort.What should you do?
C) Assign Group1 the User Access Administrator role for the root management group.
A) Create a new management group and assign Group1 the User Access Administrator role for the group.
B) Assign Group1 the Owner role for the root management group.
D) Create a new management group and assign Group1 the Owner role for the group.

Microsoft AZ-104 Exam - Topic 4 Question 77 Discussion

Actual exam question for Microsoft's AZ-104 exam
Question #: 77
Topic #: 4
[All AZ-104 Questions]

You have 15 Azure subscriptions.

You have an Azure AD tenant that contains a security group named Group1.

You plan to purchase additional Azure subscriptions.

You need to ensure that Group1 can manage role assignments for the existing subscriptions and the planned subscriptions. The solution must meet the following requirements:

* Use the principle of least privilege.

* Minimize administrative effort.

What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Marjory at Apr 25, 2023, 02:30 PM

Limited Time Offer

25%

Off

Get Premium AZ-104 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Veta
10 months ago
Option B gives too much power, not a fan of that one.
upvoted 0 times
...
Adela
10 months ago
I’m surprised people are leaning towards A, isn’t that too restrictive?
upvoted 0 times
...
Brett
11 months ago
Wait, why not just go with option C? Seems safer.
upvoted 0 times
...
Junita
11 months ago
Definitely agree with A, it keeps things simple!
upvoted 0 times
...
Kenneth
11 months ago
I think option A is the best choice for least privilege.
upvoted 0 times
...
Cortney
11 months ago
I’m a bit confused about the roles, but I think the User Access Administrator role is more aligned with managing role assignments without overstepping.
upvoted 0 times
...
Elly
11 months ago
I practiced a similar question where we had to minimize admin effort, and I think creating a new management group could help with that.
upvoted 0 times
...
Hortencia
11 months ago
I'm not entirely sure, but I feel like assigning the Owner role for the root management group could give too much access.
upvoted 0 times
...
Luke
11 months ago
I remember we discussed the principle of least privilege, so I think assigning Group1 the User Access Administrator role might be the right approach.
upvoted 0 times
...
Sonia
11 months ago
Hmm, this one's tricky. I'll need to think through the different billing options for Snowflake credits.
upvoted 0 times
...
Dorthy
12 months ago
This is a good one. I'll need to draw on my knowledge of Spring auto-configuration and think through the different scenarios presented in the options.
upvoted 0 times
...
Denise
12 months ago
This seems like a straightforward question about segregation of duties. I'll need to think through the different duties mentioned and consider which combination would provide the best opportunity for fraud.
upvoted 0 times
...
Ayomide Oluwaga
3 years ago
Answer is correct. Since group 1 needs to have access to previous subscriptions as well as new ones, creating a new management group is extra effort. Also the Owner role will eliminate the principle of least priviledge since that will not only give full control over the users but also over every aspect of the subscription including billing. User access will satisfy the goal.
upvoted 1 times
...

Save Cancel