Microsoft AZ-204 Exam - Topic 8 Question 8 Discussion

Actual exam question for Microsoft's AZ-204 exam

Question #: 8
Topic #: 8

You are developing a Java application that uses Cassandra to store key and value dat

a. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers.

The Azure AD group must not be able to access the keys that are required to access the data.

You need to restrict access to the Azure AD group.

Which role-based access control should you use?

ADocumentDB Accounts Contributor

BCosmos Backup Operator

CCosmos DB Operator

DCosmos DB Account Reader

Show Suggested Answer

Suggested Answer: C

Azure Cosmos DB now provides a new RBAC role, Cosmos DB Operator. This new role lets you provision Azure Cosmos accounts, databases, and containers, but can't access the keys that are required to access the data. This role is intended for use in scenarios where the ability to grant access to Azure Active Directory service principals to manage deployment operations for Cosmos DB is needed, including the account, database, and containers.

https://azure.microsoft.com/en-us/updates/azure-cosmos-db-operator-role-for-role-based-access-control-rbac-is-now-available/

by Sylvie at May 03, 2022, 02:10 PM

Limited Time Offer

25%

Off

Get Premium AZ-204 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Verda

5 months ago

I agree, Cosmos DB Operator makes the most sense!

upvoted 0 times

...

Buffy

5 months ago

Wait, can they really not access the keys at all?

upvoted 0 times

...

Micah

5 months ago

Cosmos DB Account Reader seems too limited for provisioning.

upvoted 0 times

...

Taryn

5 months ago

Definitely not DocumentDB Accounts Contributor!

upvoted 0 times

...

Celeste

5 months ago

I think Cosmos DB Operator is the right choice here.

upvoted 0 times

...

Tyisha

5 months ago

I’m leaning towards Cosmos DB Account Reader, but I’m not confident if it fully restricts key access as needed.

upvoted 0 times

...

Myra

5 months ago

This question feels similar to one we practiced about Azure roles. I think the DocumentDB Accounts Contributor might give too much access.

upvoted 0 times

...

Terry

5 months ago

I think the Cosmos DB Operator might be the right choice since it allows management without key access, but I need to double-check that.

upvoted 0 times

...

Marylyn

6 months ago

I remember studying role-based access control, but I'm not entirely sure which role would restrict access to the keys.

upvoted 0 times

...

Marlon

6 months ago

Okay, I know the hybrid cloud combines on-premises and cloud resources. I'll focus on the key benefits like security, control, and cost savings.

upvoted 0 times

...

Yvonne

6 months ago

Okay, let me review the code and the question options. I think I can figure out the two correct answers here.

upvoted 0 times

...

Marti

6 months ago

This seems like a straightforward question about identifying pure risk versus speculative risk. I'll carefully review each example and think through the key differences between the two types of risk.

upvoted 0 times

...

Winfred

6 months ago

Okay, I think I've got a handle on the key details here. The swap involves the US dollar and Mexican peso, with annual payments and exchange of notional principal. I'll need to calculate the present value of the dollar fixed payments using the updated term structure data provided.

upvoted 0 times

...