Azure RBAC for Control Plane Quiz

Quiz covering Security Implementation

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which Azure RBAC role provides full access to manage Azure Cosmos DB resources, including the ability to assign roles in Azure RBAC, but does not provide access to the data inside the containers?

2. 2

   A junior administrator needs to view the configuration and metrics of an Azure Cosmos DB account but must be prevented from modifying any settings or keys. Which role should you assign?

3. 3

   You need to grant a user the ability to list account keys for an Azure Cosmos DB account so they can configure an application connection string. Which permission is required?

4. 4

   An organization requires a custom role that allows users to perform all control plane operations except for the ability to delete the Cosmos DB account. Which action should be excluded from the custom role definition?

5. 5

   A user is assigned the 'Cosmos DB Operator' role at the Resource Group level. They attempt to use the Azure CLI to regenerate the primary key for a Cosmos DB account within that group, but the operation fails. What is the most likely cause?