Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft DP-420 Exam - Topic 7 Question 33 Discussion

Actual exam question for Microsoft's DP-420 exam
Question #: 33
Topic #: 7
[All DP-420 Questions]

You have a container named container1 in an Azure Cosmos DB Core (SQL) API account.

You need to provide a user named User1 with the ability to insert items into container1 by using role-based access control (RBAC). The solution must use the principle of least privilege.

Which roles should you assign to User1?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Tarra at Mar 08, 2024, 12:02 PM

Limited Time Offer

25%

Off

Get Premium DP-420 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Keva
3 months ago
I thought you needed both roles for full access.
upvoted 0 times
...
Makeda
3 months ago
Wait, can you really do that with just one role?
upvoted 0 times
...
Tiffiny
4 months ago
Definitely agree, that's the least privilege approach!
upvoted 0 times
...
Janessa
4 months ago
DocumentDB Account Contributor is too much access for just inserting.
upvoted 0 times
...
Jonelle
4 months ago
User1 needs the Cosmos DB Built-in Data Contributor role for inserts.
upvoted 0 times
...
Nieves
4 months ago
This seems straightforward enough. I'll just need to review the available roles and their permissions to determine the one that aligns best with the requirement of allowing User1 to insert items into the container. I'm confident I can figure this out.
upvoted 0 times
...
Vi
4 months ago
Okay, I think I've got this. Since the question asks for the principle of least privilege, I'll need to find the role that only grants the ability to insert items, rather than broader administrative access. I'm leaning towards option D, Cosmos DB Built-in Data Contributor.
upvoted 0 times
...
Lucy
5 months ago
Hmm, I'm a bit unsure about this one. I know RBAC is important for managing access, but I'm not too familiar with the specific Cosmos DB roles. I'll need to make sure I understand the differences between them before answering.
upvoted 0 times
...
Lenita
5 months ago
This seems like a straightforward RBAC question. I'll need to carefully review the available roles and their permissions to determine the minimum required for User1 to insert items into the container.
upvoted 0 times
...
Mattie
5 months ago
I’m a bit confused about the difference between the roles. I thought the CosmosDB Operator had some data permissions, but maybe it’s not enough for inserts?
upvoted 0 times
...
Alyssa
5 months ago
This question reminds me of a practice one where we had to assign roles based on specific actions. I think the Built-in Data Contributor is the way to go.
upvoted 0 times
...
Antonio
5 months ago
I'm not entirely sure, but I feel like the DocumentDB Account Contributor might be too broad for just inserting items.
upvoted 0 times
...
Virgilio
6 months ago
I think I remember that the Cosmos DB Built-in Data Contributor role allows for data manipulation, which seems right for inserting items.
upvoted 0 times
...
Nilsa
6 months ago
This seems pretty straightforward. The question is asking if the same cloud service can be hosted by more than one physical server when using the failover system mechanism, and the answer is clearly False.
upvoted 0 times
...
Arthur
6 months ago
Okay, I've got a strategy for this. I'll focus on the key factors that impact round-trip time in a WAN deployment, like network latency and bandwidth. That should help me narrow down the correct answer.
upvoted 0 times
...
Becky
6 months ago
Okay, I think I've got this. I just need to calculate the tax depreciation for the first year, apply the tax rate, and then discount that back to the present value. Shouldn't be too bad.
upvoted 0 times
...
An
11 months ago
Option A seems a bit overkill. The CosmosDB Operator role has way more permissions than what's required here. I'd stick with option D for this scenario.
upvoted 0 times
Bonita
9 months ago
I think option D is the most appropriate choice for assigning roles to User1 in this scenario.
upvoted 0 times
...
Margarett
9 months ago
Yeah, option A does seem like too much. Option D is definitely the way to go for least privilege.
upvoted 0 times
...
Audrie
10 months ago
I agree, option D is the best choice for providing User1 with the ability to insert items into container1.
upvoted 0 times
...
...
Felicia
11 months ago
Hmm, I'm not sure about that. Wouldn't the DocumentDB Account Contributor role be needed to manage the Cosmos DB account as well? I might go with option B just to be safe.
upvoted 0 times
Catalina
10 months ago
That makes sense, let's go with option B then.
upvoted 0 times
...
Royal
10 months ago
I see your point, it's better to be safe and go with option B to cover both managing the account and inserting items.
upvoted 0 times
...
Adaline
10 months ago
But the question specifically mentions inserting items into container1, so maybe Cosmos DB Built-in Data Contributor is enough.
upvoted 0 times
...
Rashida
10 months ago
I think you're right, DocumentDB Account Contributor role is needed for managing the Cosmos DB account.
upvoted 0 times
...
...
Eveline
11 months ago
I think option D is the correct answer. The Cosmos DB Built-in Data Contributor role provides the necessary permissions to insert items into the container, which aligns with the principle of least privilege.
upvoted 0 times
Margret
11 months ago
Yes, option D aligns with the principle of least privilege.
upvoted 0 times
...
Thea
11 months ago
I agree, option D is the correct answer.
upvoted 0 times
...
...
Ricarda
11 months ago
But wouldn't that give User1 more permissions than necessary? I think least privilege is important.
upvoted 0 times
...
Frederica
12 months ago
I disagree, I believe assigning CosmosDB Operator only would be sufficient for User1.
upvoted 0 times
...
Ricarda
12 months ago
I think we should assign DocumentDB Account Contributor and Cosmos DB Built-in Data Contributor to User1.
upvoted 0 times
...

Save Cancel