az-104 Practice Question 1696
Exam: az-104
Domain: Manage Azure identities and governance
Topic: Manage access by using RBAC
Difficulty: medium
In a hybrid environment, Contoso Ltd has a network configuration where they need to restrict access to certain Azure resources based on the originating IP addresses. How would you use Azure RBAC to implement this access control?
Answer Options
A
Assign the 'Network Contributor' role to all users.
B
Create a custom role with conditions based on IP addresses and assign it to users.
C
Use the 'Contributor' role and assign it to users with IP restrictions.
D
Assign the 'User Access Administrator' role to users with IP restrictions.
Correct Answer
B: Create a custom role with conditions based on IP addresses and assign it to users.
Explanation
The correct answer is B. By creating a custom role with specific conditions based on IP addresses, you can enforce access control based on the originating IP addresses. Option A is incorrect because it does not address the IP-based restrictions. Option C is incorrect as it does not involve creating a custom role with conditions. Option D is incorrect because it does not specify the use of conditions or custom roles.