You have multiple storage accounts in your subscription. You need to provide read access for storage account1 only to a user, Write access to storage account1 shouldn't be granted. Access to other sto

Question

Options

• AAzure AD Device Management
• BPrivileged Identity Management(PIM)
• CAzure RBAC
• DConditional Access

• A
  5% (2)
• B
  2% (1)
• C
  82% (36)
• D
  11% (5)

Explanation

Option A is Incorrect : Azure AD Device management helps register our devices to azure. Hence, it can not help in this case. Option B is Incorrect : Privileged Identity Management (PIM) enables you to manage, control, and monitor access to important resources in your organization. These resources include objects in Azure AD, Azure & M365 only and not to the Azure storage accounts. Option C is correct : Azure RBAC helps us to give fine-grained access control to our users. It can be attached at the resource level also. A reader role at the Storage account1 level will help in this Option D is Incorrect : Conditional Access is simple If-Then statements, which helps you to allow/deny/require MFA to a sign-in attempt based on the signals, not suitable to give access https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

No community discussion yet for this question.