What should you include in the solution?

HOTSPOT

You need to design a resource governance solution for an Azure subscription.

The solution must meet the following requirements:

✑ Ensure that all ExpressRoute resources are created in a resource group named RG1.

✑ Delegate the creation of the ExpressRoute resources to an Azure Active Directory (Azure AD) group named Networking.

✑ Use the principle of least privilege.

What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

View Answer

Answer:

Explanation:

Box 1: An Azure policy assignment at the subscription level that has an exclusion

Box 2: A custom RBAC role assignment at the level of RG1

Azure role-based access control (Azure RBAC) is the authorization system you use to manage access to Azure resources. To grant access, you assign roles to users, groups, service principals, or managed identities at a particular scope.