Exam AZ-104 topic 2 question 49 discussion

Q.36 Assign Network Contributor role at subscription level to Admin1  Yes Q.37 Assign Owner role at subscription level to Admin1  Yes Q.38 Assign Reader role at subscription level to Admin1  Yes Q.52 Assign Traffic Manager Contributor role at subscription level to Admin1  No

Clever cheat question by MS. You need to know. Got to know. These are traps. I dont like these anyway.

To enable Traffic Analytics for an Azure subscription, you need to have one of the following Azure built-in roles assigned to your account: Owner Contributor Network contributor Monitoring contributor https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics?wt.mc_id=knwlserapi_inproduct_azportal#prerequisites https://learn.microsoft.com/en-us/azure/network-watcher/required-rbac-permissions?wt.mc_id=knwlserapi_inproduct_azportal#traffic-analytics

To eanble Traffic manager one of there three RBAC reuired 1 Owner 2. Contributor 3. Network contributor 1 and Monitoring contributor 2 https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites

No, assigning the Traffic Manager Contributor role to Admin1 at the subscription level will not meet the goal of enabling Traffic Analytics for the Azure subscription. The Traffic Manager Contributor role only grants permissions to manage Traffic Manager profiles, endpoints, and traffic routing methods, but it does not provide the necessary permissions to enable Traffic Analytics for the Azure subscription. To enable Traffic Analytics for an Azure subscription, you need to assign the Log Analytics Contributor role to the Azure AD user named Admin1. The Log Analytics Contributor role allows the user to manage Log Analytics workspaces, which is required to enable Traffic Analytics for the Azure subscription. Therefore, assigning the Traffic Manager Contributor role to Admin1 will not meet the goal of enabling Traffic Analytics for the Azure subscription.

No, assigning the Traffic Manager Contributor role to Admin1 at the subscription level will not meet the goal of enabling Traffic Analytics for the Azure subscription. The Traffic Manager Contributor role only grants permissions to manage Traffic Manager profiles, endpoints, and traffic routing methods, but it does not provide the necessary permissions to enable Traffic Analytics for the Azure subscription. To enable Traffic Analytics for an Azure subscription, you need to assign the Log Analytics Contributor role to the Azure AD user named Admin1. The Log Analytics Contributor role allows the user to manage Log Analytics workspaces, which is required to enable Traffic Analytics for the Azure subscription. Therefore, assigning the Traffic Manager Contributor role to Admin1 will not meet the goal of enabling Traffic Analytics for the Azure subscription.

No, assigning the "Traffic Manager Contributor" role to the user "Admin1" will not meet the goal of enabling Traffic Analytics for the Azure subscription. The "Traffic Manager Contributor" role is related to Azure Traffic Manager, which is a DNS-based traffic load balancer used to distribute traffic across multiple Azure services or endpoints in different data centers. For enabling Traffic Analytics, you need to assign the appropriate role related to Azure Monitor and Log Analytics, not Traffic Manager. To achieve the goal, you should assign the "Log Analytics Contributor" or "Contributor" role at the subscription level to the user "Admin1". These roles grant permissions to manage and configure resources related to Azure Monitor, including Traffic Analytics. Remember to always follow the principle of least privilege and only assign the necessary permissions to users based on their roles and responsibilities.

B is corerct

The Traffic Manager Contributor role does not provide the necessary permissions to enable Traffic Analytics for an Azure subscription. To enable Traffic Analytics, you need permissions to configure and access the logs and data associated with network traffic. Required Role: Network Contributor or a custom role with permissions to configure Traffic Analytics and access diagnostic settings is typically needed for managing Traffic Analytics configurations. Explanation: Traffic Manager Contributor Role: This role allows users to manage Traffic Manager profiles and endpoints but does not grant access to configure Traffic Analytics or manage diagnostic settings. Correct Answer: B. No

No is right

Please read carefully "Traffic Manager " Contributor nothing to do with "Traffic Analytics" , is 2 different service .

The Traffic Manager Contributor role is specifically for managing Traffic Manager profiles and does not provide the necessary permissions to enable Traffic Analytics. Enabling Traffic Analytics requires the Network Contributor or higher role at the subscription level.

B is the answer. https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements One of the following Azure built-in roles needs to be assigned to your account: - Owner - Contributor - Reader - Network Contributor

Hello here it says that the correct answer is NO. But in the Question #33 Subject 2 says YES and in Question #49 Subject 2 says NO. Looking back, it's the same question. I'm a bit confused.

Hello here it says that the correct answer is NO. But in the Question #33 Subject 2 says YES and in Question #49 Subject 2 says NO. Looking back, it's the same question. I'm a bit confused.

Answer: No Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor. You have to consider the Traffic Analytics requires the following prerequisites: A Network Watcher enabled subscription. Network Security Group (NSG) flow logs enabled for the NSGs you want to monitor. An Azure Storage account, to store raw flow logs. An Azure Log Analytics workspace, with read and write access. Your account must meet one of the following to enable traffic analytics:

B) "No" One of the following Azure built-in roles needs to be assigned to your account: - Owner - Contributor - Reader - Network Contributor Reference: https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements