RBAC Quiz

What you'll be asked

1. Which of the following is the primary service used to manage access to Azure resources using Role-Based Access Control (RBAC)?
2. A developer needs the ability to manage virtual machines but should not be allowed to modify the virtual network settings. Which role should you assign?
3. You have assigned a user the 'Reader' role at the Resource Group level. What happens if you assign the 'Contributor' role to that same user at the Subscription level?
4. Which component of an RBAC assignment defines the specific set of actions a user can perform?
5. An organization has a custom RBAC role that provides 'Delete' permissions on storage accounts. If an Azure Blueprints assignment or Azure Policy 'Deny' effect is applied to the same resource, which takes precedence?

Answers and explanations come after you submit.