AZ-800 · Question #33
You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2. A user…
The correct answer is B. Assign Admin1 the Azure Connected Machine Onboarding role for RG1. To limit the privilege of a user and only allow them to onboard servers to Azure, the Azure Connected Machine Onboarding role is suitable. This role can only be used to onboard servers and cannot reonboard or delete the server resource. Make sure to review the Azure Arc-enabled…
Question
You have an on premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The domain contains two servers named Server1 and Server2. A user named Admin1 is a member of the local Administrators group on Server1 and Server2. You plan to manage Server1 and Server2 by using Azure Arc. Azure Arc objects will be added to a resource group named RG1. You need to ensure that Admin1 can configure Server1 and Server2 to be managed by using Azure Arc. What should you do first?
Options
- AFrom the Azure portal, generate a new onboarding script.
- BAssign Admin1 the Azure Connected Machine Onboarding role for RG1.
- CHybrid Azure AD join Server1 and Server2.
- DCreate an Azure cloud-only account for Admin1.
How the community answered
(48 responses)- A6% (3)
- B83% (40)
- C8% (4)
- D2% (1)
Explanation
To limit the privilege of a user and only allow them to onboard servers to Azure, the Azure Connected Machine Onboarding role is suitable. This role can only be used to onboard servers and cannot reonboard or delete the server resource. Make sure to review the Azure Arc-enabled servers security overview for more information about access controls. https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/hybrid/arc-enabled- servers/eslz-identity-and-access-management
Topics
Community Discussion
No community discussion yet for this question.