Monitor resources in Azure
Objective monitor.resources sits in Monitor and maintain Azure resources, which carries 14% of the Azure Administrator exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.
Objective title verbatim from the official objectives. Microsoft Azure exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
An administrator assigns the Monitoring team a role at the subscription scope so members can view resource health and metrics across every resource group without changing configurations. Which element of the role assignment determines that this access applies to all resource groups in the subscription?
The concept
A role assignment in Azure RBAC is made up of three elements: security principal, role definition, and scope. Scope sets the boundary of resources the access applies to, at management group, subscription, resource group, or resource level.
Why this answer
Because the role was assigned at the subscription scope, the permissions apply to every resource group and resource beneath that subscription, which is why the Monitoring team can view resources anywhere in it.
- AThe security principal identifies who is receiving access, such as the Monitoring team, but it does not define how far that access reaches.
- BThe role definition lists which actions are allowed, such as read-only viewing, but it does not determine which resource groups the access covers.
- Correct: scope is the setting that determines the breadth of resources the role assignment applies to.
- DA deny assignment blocks access rather than defining the boundary of where a granted role applies.
Now you: objective monitor.resources questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
A monitoring engineer holds the Contributor role at the subscription scope for automation tasks. The same engineer is also assigned the Reader role directly on a specific resource group to build dashboards. What are the engineer's effective permissions on resources in that resource group?
Sample question 2 of 3
One alert rule must notify three on-call rotations, each with its own notification list, without duplicating the rule. How many action groups can a single alert rule use?
Sample question 3 of 3
Which metrics are named as examples an application can be scaled on?
Full Azure Administrator question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.