SC-300 Certification Practice Question #102

Question

You have an Azure subscription that contains the custom roles shown in the following table.

You need to create a custom Azure subscription role named Role3 by using the Azure portal. Role3 will use the baseline permissions of an existing role.

Which roles can you clone to create Role3?

Accepted Answer

Role3 is an Azure subscription (RBAC) custom role. Per MS Learn, when creating an Azure custom role from Access control (IAM) you can clone an existing built-in OR custom role — and that Roles tab surfaces Azure built-in subscription roles plus existing Azure custom subscription roles (Role2). Microsoft Entra/Azure AD roles (Role1) belong to a separate role system created through a different portal experience, so they are not available as a clone source for an Azure subscription role. That eliminates Role1 (rules out E), and "built-in subscription roles only" / "Role2 only" each omit a valid source (rules out A and B). The minority "A only" view is wrong because built-in roles are explicitly clonable. Confidence is set at 90 rather than higher because the question wording ("baseline permissions of an existing role") is mildly ambiguous and a vocal minority picked A, but Suggested Answer, a dominant Most Voted (30), a hands-on tenant test, and MS Learn all confirm C.

More SC-300 practice questions