Configure name resolution and load balancing
Objective name.resolution-load-balancing sits in Implement and manage virtual networking, which carries 19% of the Azure Administrator exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.
Objective title verbatim from the official objectives. Microsoft Azure exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
An administrator must let a partner team configure load balancing resources in one resource group only, without gaining access to any other resource group in the subscription. Which Azure RBAC element controls this restriction?
The concept
Azure RBAC role assignments are made up of a security principal, a role definition, and a scope, and scope is what limits where the permissions apply.
Why this answer
Scope can be set at the resource group level, so assigning the role at that resource group confines the partner team's access to only the resources inside it, such as the load balancer.
- Correct: scope is the level (management group, subscription, resource group, or resource) that limits where a role assignment applies.
- BRole definition lists the actions a role allows, such as read or write, but it does not by itself limit access to a single resource group.
- CSecurity principal identifies who is receiving access, such as the partner team's group, but it does not restrict which resource group the access covers.
- DRole assignment is the overall act of attaching a role to a principal at a scope, but the resource-group restriction itself comes from the scope chosen, not the assignment concept.
Now you: objective name.resolution-load-balancing questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
A company moves a legacy application to Azure. The application depends on Kerberos and LDAP for name resolution and authentication and cannot be rewritten to use modern authentication methods. Which Microsoft Entra product should be deployed to support it?
Sample question 2 of 3
A network administrator wants a contractor to create and manage Azure Load Balancers only inside the 'network-ops' resource group, with no access to other resources in the subscription. Which scope should the administrator use for the role assignment?
Sample question 3 of 3
Priya is assigned the Contributor role at the subscription scope. She is also assigned a custom 'DNS Zone Reader' role at the resource group scope that contains the private DNS zone used for name resolution. What are her effective permissions on that DNS zone?
Full Azure Administrator question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.