ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 106 - AZ-204 discussion

Report
Export

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers.

The Azure AD group must not be able to access the keys that are required to access the data.

You need to restrict access to the Azure AD group.

Which role-based access control should you use?

A.
DocumentDB Accounts Contributor
Answers
A.
DocumentDB Accounts Contributor
B.
Cosmos Backup Operator
Answers
B.
Cosmos Backup Operator
C.
Cosmos DB Operator
Answers
C.
Cosmos DB Operator
D.
Cosmos DB Account Reader
Answers
D.
Cosmos DB Account Reader
Suggested answer: C

Explanation:

Azure Cosmos DB now provides a new RBAC role, Cosmos DB Operator. This new role lets you provision Azure Cosmos accounts, databases, and containers, but can't access the keys that are required to access the data. This role is intended for use in scenarios where the ability to grant access to Azure Active Directory service principals to manage deployment operations for Cosmos DB is needed, including the account, database, and containers.

Reference:

https://azure.microsoft.com/en-us/updates/azure-cosmos-db-operator-role-for-role-based-access-control-rbac-is-now-available/

asked 02/10/2024
ELVIS KENVO
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first