AZ-104 Certification Practice Question #94

Question

You have an Azure subscription that contains a user named User1 and the resources shown in the following table.

NSG1 is associated to networkinterface1.

User1 has role assignments for NSG1 as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Accepted Answer

User1 holds the Storage Account Contributor role inherited from the Resource Group (RG1) scope, which allows them to create and manage storage accounts within RG1. However, User1's Contributor role is assigned directly on NSG1 ("This resource"), not on the Resource Group or networkinterface1. Thus, User1 can create inbound security rules on NSG1 (which filters traffic to networkinterface1) but cannot modify the DNS settings of networkinterface1 itself, as this would require Network Contributor or Contributor permissions at the network interface or Resource Group scope.

More AZ-104 practice questions