nerdexam
Microsoft

AZ-500 · Question #410

Drag and Drop Question You have an Azure subscription. You plan to create two custom roles named Role1 and Role2. The custom roles will be used to perform the following tasks: - Members of Role1…

The correct answer is Role1: Microsoft.Network; Role2: Microsoft.Network. Both Application Security Groups (ASGs) and Azure Bastion are networking resources in Azure, so both Role1 and Role2 should use the Microsoft.Network resource provider. Application Security Groups are managed under Microsoft.Network/applicationSecurityGroups, and Azure Bastion…

Submitted by ashley.k· Mar 6, 2026Manage Azure identities and governance - specifically configuring role-based access control (RBAC) with custom roles and understanding Azure resource provider namespaces

Question

Drag and Drop Question You have an Azure subscription. You plan to create two custom roles named Role1 and Role2. The custom roles will be used to perform the following tasks: - Members of Role1 will manage application security groups. - Members of Role2 will manage Azure Bastion. You need to add permissions to the custom roles. Which resource provider should you use for each role? To answer, drag the appropriate resource providers to the correct roles. Each resource provider may be used, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

AZ-500 question #410 exhibit

Answer Area

Drag items

Microsoft.ComputeMicrosoft.NetworkMicrosoft.SecurityMicrosoft.Solutions

Correct arrangement

  • Role1: Microsoft.Network
  • Role2: Microsoft.Network

Explanation

Both Application Security Groups (ASGs) and Azure Bastion are networking resources in Azure, so both Role1 and Role2 should use the Microsoft.Network resource provider. Application Security Groups are managed under Microsoft.Network/applicationSecurityGroups, and Azure Bastion is managed under Microsoft.Network/bastionHosts. The Microsoft.Network namespace covers a broad range of Azure networking services, including virtual networks, load balancers, firewalls, and both of these specific services.

Topics

#Azure RBAC#Custom Roles#Resource Providers#Azure Networking

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice