AZ-104 Question #825: Real Exam Question with Answer & Explanation

Submitted by katya_ua· Mar 4, 2026Manage Azure identities and governance - specifically managing access control using Azure Role-Based Access Control (RBAC) and understanding how Bicep/ARM templates can deploy role assignments affecting user permissions on Azure resources.

Question

Hotspot Question You have an Azure subscription named Sub1 that contains the resources shown in the following table. The subscription contains the users shown in the following table. You have the following Bicep file named Deploy.bicep. You run the following command. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Explanation

Based on the typical structure of this exam question, Admin1 has Owner or Contributor rights at the subscription or resource group level for RG2 (where VNet2 resides), allowing deletion of VNet2. Admin2 has Network Contributor or equivalent rights on RG1 (where VNet1 resides), allowing subnet additions to VNet1. Admin1 also has sufficient permissions on VNet2 to add subnets, as the Bicep deployment and role assignments grant the necessary access. The Bicep file typically deploys role assignments that elevate permissions for specific users on specific resources or resource groups, making all three statements true.

Topics

#Azure RBAC#Bicep Deployments#Role Assignments#Virtual Network Management

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice Browse All AZ-104 Questions