Noos
PT EN
RAN-AZ900-00191
Ranvier · AZ900

Exam AZ900 Topics: architecture Difficulty: easy

A SaaS company with several engineering teams must control access to its Azure resources. Each team should receive only the level of access it needs to complete its tasks — no more — and that access should attach to a specific set of resources, such as one resource group. Which mechanism should the company use?

Options (Reading Mode) Click to filter discussion →
  1. A. Azure role-based access control, granting access through role assignments at a chosen scope
  2. B. Microsoft Entra Conditional Access, evaluating identity signals at sign-in and challenging risky sign-ins
  3. C. Azure Policy definitions, auditing and enforcing configuration rules on deployed resources
  4. D. Resource locks, preventing the accidental deletion or modification of critical resources
Reveal answer

Correct answer: Azure role-based access control, granting access through role assignments at a chosen scope

Reference: https://learn.microsoft.com/en-us/training/modules/describe-azure-identity-access-security/6-role-based-access-control

Train this exam on Ranvier →

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (A): Azure role-based access control, granting access through role assignments at a chosen scope

Ranvier · AZ900

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.