Microsoft Azure Architect Technologies (AZ-300) Practice Exam

What is Role-Based Access Control (RBAC) used for in Azure?

1. To control network traffic

2. To define and restrict user permissions based on roles

3. To manage virtual machine deployments

4. To perform security audits

The correct answer is: To define and restrict user permissions based on roles

Role-Based Access Control (RBAC) in Azure is utilized to define and manage user permissions based on specific roles assigned within an organization. This feature enables administrators to grant users access to Azure resources at a granular level, ensuring that individuals only have the permissions necessary to perform their job functions. By leveraging RBAC, organizations can enforce the principle of least privilege, enhancing security and minimizing the risk of unauthorized access to sensitive resources. RBAC operates by mapping roles to users, groups, or service principals, which allows for clearer and more efficient management of permissions across the cloud environment. This helps streamline operations and ensures that users cannot inadvertently gain access to resources that are not relevant to their roles in the organization. In contrast, the other options address different areas of Azure's functionality. Controlling network traffic involves various network security features like Network Security Groups or Azure Firewalls, which are focused on the flow of data across networks. Managing virtual machine deployments pertains to the orchestration and configuration of compute resources, which is outside the scope of access control. Performing security audits typically involves reviewing logs and configurations to ensure compliance and security posture rather than directly allocating user permissions.