Microsoft
AZ-204 · Question #402
You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Acti
Sign in or unlock AZ-204 to reveal the answer and full explanation for question #402. The question stem and answer options stay visible for context.
Submitted by amina.ke· Mar 30, 2026Implement Azure security
Question
You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers. The Azure AD group must not be able to access the keys that are required to access the data. You need to restrict access to the Azure AD group. Which role-based access control should you use?
Options
- ADocumentDB Accounts Contributor
- BCosmos Backup Operator
- CCosmos DB Operator
- DCosmos DB Account Reader
Unlock AZ-204 to see the answer
You've previewed enough free AZ-204 questions. Unlock AZ-204 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Cosmos DB#RBAC#Cosmos DB Operator#Azure AD