Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

What component is essential for Azure security and authorizes the identity of users and services?

1. Identity Management

2. Role-Based Access Control

3. Azure Firewall

4. Network Security Group

The correct answer is: Role-Based Access Control

Role-Based Access Control (RBAC) is a crucial component for Azure security as it specifically empowers organizations to manage access to Azure resources effectively. By allowing administrators to assign roles to users, groups, and services, RBAC ensures that individuals have the necessary permissions corresponding to their responsibilities. This fine-grained access control not only enhances security but also simplifies resource management, as users are granted the least privilege necessary to perform their tasks, minimizing the risk of accidental or unauthorized changes to resources. The other options involve parts of Azure’s security framework but do not focus on the authorization of identity. Identity Management pertains to the overall management of user identities but is a broader concept rather than the specific mechanism for controlling access. An Azure Firewall functions as a security measure to protect your Azure resources by filtering traffic, while a Network Security Group serves to manage inbound and outbound network traffic to Azure resources. However, neither of these directly addresses the core function of authorizing user identities as RBAC does.