Microsoft Azure Administrator Associate AZ-104 Practice Question
You are an Azure administrator for your company. Certain users need to manage virtual networks but must not have the ability to delete them. How should you fulfill this requirement?
Implement a resource lock to prevent deletion of virtual networks
Use Azure Policy to prevent deletion of virtual networks
Assign the built-in 'Network Contributor' role to the users
Create a custom role that excludes the delete permission for virtual networks, then assign this role to users
Creating a custom role that excludes the delete permission for virtual networks is the appropriate solution. This allows you to grant the necessary permissions for managing virtual networks while preventing deletion. Assigning the built-in 'Network Contributor' role would grant users the ability to delete virtual networks. Using Azure Policy or resource locks can prevent deletion but do not adjust user permissions and may interfere with other administrative functions.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are Azure roles and how do they work?
Open an interactive chat with Bash
What is the difference between built-in roles and custom roles in Azure?
Open an interactive chat with Bash
What is Azure Policy and how does it work?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Manage Azure identities and governance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access