Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

Which Azure service allows you to configure fine-grained access management for Azure resources?

1. Locks

2. Policy

3. Initiatives

4. Role-based Access Control

The correct answer is: Role-based Access Control

The correct answer is Role-based Access Control (RBAC), which is a cornerstone feature in Azure for managing access to resources. RBAC enables you to define specific access rights for users, groups, and applications at different scopes, such as subscriptions, resource groups, or individual resources. This fine-grained access management ensures that individuals or services can only perform actions that are necessary for their role, thereby enhancing security and compliance in Azure environments. Locks, Policies, and Initiatives serve different purposes. Locks are used to prevent accidental deletion or modification of resources, which doesn't address access management per se; rather, they protect resource integrity. Policies in Azure are utilized to enforce standards and rules across your Azure resources, but they do not directly assign or manage permissions for users. Initiatives, on the other hand, are a way to group multiple policies for easier management, but they still do not relate to fine-grained access control. Therefore, RBAC is specifically designed for the purpose of managing who can access what resources and what actions they can take on those resources, which makes it the most appropriate choice for this question.