Discuss The SecOps Group CCPenX-Az Exam Topic 4 Question 2

After authenticating as the service principal, enumerate its assigned Azure RBAC role. Which role does it have?

A. Reader B. Contributor C. Storage Account Contributor D. Owner

BContributor
================

Suggested Answer: B

Detailed Solution:

Resolve the service principal object ID:

az ad sp show --id c5fba7db-5e61-45bc-8944-3cd457bb19c2 --query id --output tsv

Then list role assignments:

SP_OBJECT_ID=$(az ad sp show --id c5fba7db-5e61-45bc-8944-3cd457bb19c2 --query id --output tsv) az role assignment list --assignee '$SP_OBJECT_ID' --all --output table

Expected output:

Principal Role Scope ------------------------------------ ----------- ---------------------------------------- <sp-object-id> Contributor /subscriptions/5d8e44ac-...

Correct answer:

Get Premium CCPenX-Az Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Marci 1 month ago

I agree, B makes sense. It’s a common role for service principals.

Yesenia 1 month ago

I feel like it's too straightforward. Definitely B.

Yoko 1 month ago

I think it's B. Contributor. It allows for resource management.

Glory 2 months ago

I don't know, seems too easy to just be Contributor.

Ruby 2 months ago

Contributor is the most common role for service principals.

Trina 2 months ago

Wait, are you sure it's not Reader?

Dallas 2 months ago

I thought it could be Owner, but Contributor makes sense.

Shenika 2 months ago

It's definitely the Contributor role!

Erasmo 2 months ago

I’m leaning towards Contributor since it seems like a common role for service principals, but I could be wrong.

Novella 3 months ago

I’m a bit confused about the specific roles. Could it be Reader instead? I feel like I need to double-check my notes.

Nohemi 3 months ago

I remember practicing a similar question about service principals and their roles. I think Contributor was one of the options we discussed.

Yoko 3 months ago

I think we covered Azure RBAC roles in class, but I’m not entirely sure which one the service principal would have by default.

The SecOps Group CCPenX-Az Exam - Topic 4 Question 2 Discussion