Microsoft Azure Security Engineer Associate AZ-500 Practice Question
A resource group in Azure contains several virtual machines (VMs) and their associated network and storage resources. You need to assign a built-in role to an administrator that allows her to manage the lifecycle of the VMs, including creating and deleting them. However, she must be prevented from managing the virtual network or the storage accounts where the VM disks reside. Which Azure built-in role should you assign?
The Virtual Machine Contributor role allows a user to manage virtual machines but not the virtual network or storage accounts they are connected to. This meets the principle of least privilege for the stated requirements. The Contributor role is too permissive, granting permissions to manage network and storage resources. The Reader role is too restrictive, as it only allows for viewing resources and does not permit any management actions.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What permissions does the Virtual Machine Contributor role provide?
Open an interactive chat with Bash
Why is the Contributor role considered too permissive for this scenario?
Open an interactive chat with Bash
What is the principle of least privilege, and why is it important in Azure security?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure identity and access
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .