Secure, monitor, and optimize data storage and data processing →easyMultiple ChoiceObjective-mapped

DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing

Exhibit

Refer to the exhibit.

{
  "type": "Microsoft.Authorization/roleAssignments",
  "apiVersion": "2020-04-01-preview",
  "name": "[guid(resourceGroup().id, 'Storage Blob Data Contributor')]",
  "properties": {
    "roleDefinitionId": "[subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'ba92f5b4-2d11-453d-a403-e96b0029c9fe')]",
    "principalId": "[parameters('principalId')]",
    "scope": "[resourceGroup().id]"
  }
}

You are reviewing an ARM template that assigns a role. What role is being assigned, and at what scope?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Storage Blob Data Contributor at the resource group scope

The roleDefinitionId in the ARM template corresponds to 'Storage Blob Data Contributor' and the scope is set to the resource group. Option A is wrong because the scope is not subscription level. Option B is wrong because the role is not 'Storage Blob Data Reader' (the GUID for that role is different). Option D is wrong because the scope is the resource group, not the storage account.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Storage Blob Data Owner at the subscription scope
Why it's wrong here
The role and scope are incorrect.
✗
Storage Blob Data Reader at the resource group scope
Why it's wrong here
The GUID matches 'Storage Blob Data Contributor', not 'Data Reader'.
✓
Storage Blob Data Contributor at the resource group scope
Why this is correct
The roleDefinitionId is for 'Storage Blob Data Contributor' and scope is resourceGroup().id.
✗
Storage Blob Data Contributor at the storage account scope
Why it's wrong here
The scope is the resource group, not the storage account.

Go deeper

DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question