Home » Microsoft » AZ-500 v.2 » HOTSPOT
HOTSPOT
You assign User8 the Owner role for RG4, RG5, and RG6.
In which resource groups can User8 create virtual networks and NSGs? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Explanation/Reference:
Explanation:
Box 1: RG4 only Virtual Networks are not allowed for Rg5 and Rg6.
Box 2: Rg4,Rg5, and Rg6 Scenario:
Contoso has two Azure subscriptions named Sub1 and Sub2.
Sub1 contains six resource groups named RG1, RG2, RG3, RG4, RG5, and RG6.
You assign User8 the Owner role for RG4, RG5, and RG6 User8 city Sidney, Role:None Note: A network security group (NSG) contains a list of security rules that allow or deny network traffic to resources connected to Azure Virtual Networks (VNet). NSGs can be associated to subnets, individual VMs (classic), or individual network interfaces (NIC) attached to VMs (Resource Manager).
References:
https://docs.microsoft.com/en-us/azure/governance/policy/overview
Allowed resource types NSG RG4
Not Allowed resource types virtualNetworks/subnets RG5
Not Allowed resource types NetworkSecurityGroups RG5
Not Allowed resource types virtualNetworks/VirtualNetworkPeerings RG6
Makes no sense. If RG5 says NO NETWORK SECURITY GROUPS how can you add a NSG? Anyone understand that?
question out of context, it’s part of the Contoso, Ltd case study