AZ-104 Exam Notes - Managing Azure
Subscriptions and Resource Groups
Questions and Answers
Azure Security Center - Answer--Creates default security policies automatically for each
subscription
-Can be edited and monitored for compliance in Security Center
-Extend policies using Azure Policies
Azure Policies - Answer-A service in Azure that you use to create, assign, and manage
policies
Role-Based Access Control (RBAC) - Answer--An access control model that bases the
access control authorizations on the roles (or functions) that the user is assigned within
an organization
-Duty segregation is possible by allowing the ability to grant only the level of access
needed by certain users. Permissions can be scoped to specific resources or activities.
Account Admin - Answer--Can only have one Account Admin
-Access to Azure Account Center; can manage all subscriptions in the account
-Create New Subscriptions/Cancel Existing ones
-Change the billing for a subscription
-Change the Service Administrator account
Service Administrator - Answer--One per Azure subscription
-Manages services in Azure Portal
-Assign users as Co-admin
-In a new subscription the Account Admin is also the Service Admin
-Granted full access to the Azure Portal and has same access as a user who is
assigned the owner role
Co-Administrator - Answer--Same access as the Service Administrator
Subscriptions and Resource Groups
Questions and Answers
Azure Security Center - Answer--Creates default security policies automatically for each
subscription
-Can be edited and monitored for compliance in Security Center
-Extend policies using Azure Policies
Azure Policies - Answer-A service in Azure that you use to create, assign, and manage
policies
Role-Based Access Control (RBAC) - Answer--An access control model that bases the
access control authorizations on the roles (or functions) that the user is assigned within
an organization
-Duty segregation is possible by allowing the ability to grant only the level of access
needed by certain users. Permissions can be scoped to specific resources or activities.
Account Admin - Answer--Can only have one Account Admin
-Access to Azure Account Center; can manage all subscriptions in the account
-Create New Subscriptions/Cancel Existing ones
-Change the billing for a subscription
-Change the Service Administrator account
Service Administrator - Answer--One per Azure subscription
-Manages services in Azure Portal
-Assign users as Co-admin
-In a new subscription the Account Admin is also the Service Admin
-Granted full access to the Azure Portal and has same access as a user who is
assigned the owner role
Co-Administrator - Answer--Same access as the Service Administrator
