AZ-500 Question #410: Real Exam Question with Answer & Explanation

Question

Drag and Drop Question You have an Azure subscription. You plan to create two custom roles named Role1 and Role2. The custom roles will be used to perform the following tasks: - Members of Role1 will manage application security groups. - Members of Role2 will manage Azure Bastion. You need to add permissions to the custom roles. Which resource provider should you use for each role? To answer, drag the appropriate resource providers to the correct roles. Each resource provider may be used, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Explanation

Both Application Security Groups (ASGs) and Azure Bastion are networking resources in Azure, so both Role1 and Role2 should use the Microsoft.Network resource provider. Application Security Groups are managed under Microsoft.Network/applicationSecurityGroups, and Azure Bastion is managed under Microsoft.Network/bastionHosts. The Microsoft.Network namespace covers a broad range of Azure networking services, including virtual networks, load balancers, firewalls, and both of these specific services.

No community discussion yet for this question.