Managing Custom Azure Roles

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Managing Security Controls for Identity

What you'll be asked

  1. When creating a custom role in Azure, which property in the JSON definition is used to specify the management groups, subscriptions, or resource groups where the role can be assigned?
  2. A security administrator needs to create a custom role that allows users to read all resources in a subscription but explicitly prevents them from reading Key Vault secrets. How should the permissions be structured?
  3. Which of the following is a strict requirement when choosing a 'Name' for a new custom Azure role?
  4. If a custom role is defined with 'assignableScopes' set to a specific Resource Group ID, where can this role be assigned?
  5. An organization has reached the limit of 5,000 custom roles in their Azure AD tenant but requires new permission sets for a high-priority project. What is the recommended best practice to address this?

Answers and explanations come after you submit.