AZ-104 Exam Notes - Managing Azure Subscriptions and Resource Groups Questions and Answers

AZ-104 Exam Notes - Managing Azure
Subscriptions and Resource Groups
Questions and Answers
Azure Security Center - Answer--Creates default security policies automatically for each
subscription

-Can be edited and monitored for compliance in Security Center

-Extend policies using Azure Policies

Azure Policies - Answer-A service in Azure that you use to create, assign, and manage
policies

Role-Based Access Control (RBAC) - Answer--An access control model that bases the
access control authorizations on the roles (or functions) that the user is assigned within
an organization

-Duty segregation is possible by allowing the ability to grant only the level of access
needed by certain users. Permissions can be scoped to specific resources or activities.

Account Admin - Answer--Can only have one Account Admin

-Access to Azure Account Center; can manage all subscriptions in the account

-Create New Subscriptions/Cancel Existing ones

-Change the billing for a subscription

-Change the Service Administrator account

Service Administrator - Answer--One per Azure subscription

-Manages services in Azure Portal

-Assign users as Co-admin

-In a new subscription the Account Admin is also the Service Admin

-Granted full access to the Azure Portal and has same access as a user who is
assigned the owner role

Co-Administrator - Answer--Same access as the Service Administrator