EXAM 450 COMPREHENSIVE QUESTIONS WITH DETAILED &
VERIFIED ANSWERS (100% CORRECT ANSWERS) /A+
GRADE ASSURED
What is a service administrator? - (correct answer) The person responsible for managing the
services within a subscription.
How many account co-administrators can there be per subscription? - (correct answer) Up to 200.
What does RBAC stand for? - (correct answer) Role-Based Access Control
What are the two types of roles in RBAC? - (correct answer) Builtin and custom roles
What can the Owner role do in RBAC? - (correct answer) Manage resources, security, and role
assignments
What are the scopes where RBAC can be applied? - (correct answer) Management Group,
Subscription, Resource Group, Resources
What happens when you give permissions at the management group level in RBAC? - (correct
answer) They inherit access to subscriptions, resource groups, and resources
Which role assignment takes precedence in RBAC? - (correct answer) The one with the highest
scope (subscription level)
What is the maximum number of role assignments per subscription in RBAC? - (correct answer)
2000
What is the maximum number of role assignments per management group in RBAC? - (correct
answer) 500
What roles are required to create/remove role assignments in RBAC? - (correct answer) Owner or
User Access Administrator roles (or a custom role)
Can custom roles be shared between subscriptions? - (correct answer) Yes, if they share the same
AD directory
What is the maximum number of custom roles per directory? - (correct answer) 5000
What are the three ways to create custom roles in RBAC? - (correct answer) Clone from existing
roles, start from scratch, or use a JSON file
What are the elements of a JSON role definition in RBAC? - (correct answer) Name, Id, Description,
Iscustom, Actions/NotActions, AssignableScopes
What is a subscription in Azure? - (correct answer) A billing boundary
What is a resource in Azure? - (correct answer) A service instance
Can resource groups be renamed in Azure? - (correct answer) No
, What is Azure Policy used for? - (correct answer) To create, assign, and manage policies for
governance in Azure environment
What is the difference between Policy and RBAC in Azure? - (correct answer) Policy allows by
default and must explicitly deny, while RBAC denies by default and must explicitly allow
What are initiative definitions in Azure Policy? - (correct answer) A set of policies applied to a scope
What is an initiative assignment in Azure Policy? - (correct answer) The scope where the initiative
definition is applied
What are the elements of a policy definition in Azure Policy? - (correct answer) Mode, Parameters,
Display Name, Description, Policy Rule
What are the scopes in Azure Policy? - (correct answer) Management Group, Subscription, Resource
Group, Resource
What is a Management Group? - (correct answer) Applies to all child management groups and
subscriptions.
What is a Subscription? - (correct answer) Applies to all child resource groups.
What is a Resource Group? - (correct answer) Applies to all child resources.
What are Excluded Scopes? - (correct answer) Scopes excluded from a policy scope.
What is a CanNotDelete lock? - (correct answer) Prevents deletions of a resource.
What is a ReadOnly lock? - (correct answer) Prevents deletions and modification of a resource.
What are the Resource Lock Scopes? - (correct answer) Subscription, Resource Group, Resources.
What happens if a CanNotDelete lock is applied to a resource within a resource group and you attempt
to delete the resource group? - (correct answer) The deletion will fail.
What does a ReadOnly lock on a storage account prevent? - (correct answer) Creating new
containers.
Where must tags be applied to be visible in usage exports? - (correct answer) Resource scope.
Are tags inherited by child resources? - (correct answer) No.
What is the maximum length for a tag name? - (correct answer) 512 characters.
What is the maximum length for a tag value? - (correct answer) 256 characters.
What is the maximum number of tags for resources, resource groups, and subscriptions? - (correct
answer) 50 each.
What is the maximum length for all tag names and values combined for VMs? - (correct answer)
2048 characters.