AZ-104 Exam - Question 89

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the required role to enable Traffic Analytics for an Azure subscription.

Solution: You assign the Traffic Manager Contributor role at the subscription level to Admin1.

Does this meet the goal?

Examice · Accepted Answer

Assigning the Traffic Manager Contributor role to Admin1 at the subscription level will not meet the goal of enabling Traffic Analytics for the Azure subscription. The Traffic Manager Contributor role is specifically for managing Traffic Manager profiles and does not provide the necessary permissions to enable Traffic Analytics. Enabling Traffic Analytics requires roles such as Network Contributor or higher, like Owner or Contributor, at the subscription level. Therefore, the correct answer is No.

GoldenFox · Answer

Q.36
Assign Network Contributor role at subscription level to Admin1  Yes
Q.37
Assign Owner role at subscription level to Admin1  Yes
Q.38
Assign Reader role at subscription level to Admin1  Yes
Q.52
Assign Traffic Manager Contributor role at subscription level to Admin1  No

Marski · Answer

Clever cheat question by MS. You need to know. Got to know. These are traps. I dont like these anyway.

esawormjr · Answer

No, assigning the "Traffic Manager Contributor" role to the user "Admin1" will not meet the goal of enabling Traffic Analytics for the Azure subscription. The "Traffic Manager Contributor" role is related to Azure Traffic Manager, which is a DNS-based traffic load balancer used to distribute traffic across multiple Azure services or endpoints in different data centers.

For enabling Traffic Analytics, you need to assign the appropriate role related to Azure Monitor and Log Analytics, not Traffic Manager. To achieve the goal, you should assign the "Log Analytics Contributor" or "Contributor" role at the subscription level to the user "Admin1". These roles grant permissions to manage and configure resources related to Azure Monitor, including Traffic Analytics.

Remember to always follow the principle of least privilege and only assign the necessary permissions to users based on their roles and responsibilities.

ricardona · Answer

No, assigning the Traffic Manager Contributor role to Admin1 at the subscription level will not meet the goal of enabling Traffic Analytics for the Azure subscription.

The Traffic Manager Contributor role only grants permissions to manage Traffic Manager profiles, endpoints, and traffic routing methods, but it does not provide the necessary permissions to enable Traffic Analytics for the Azure subscription.

To enable Traffic Analytics for an Azure subscription, you need to assign the Log Analytics Contributor role to the Azure AD user named Admin1. The Log Analytics Contributor role allows the user to manage Log Analytics workspaces, which is required to enable Traffic Analytics for the Azure subscription.

Therefore, assigning the Traffic Manager Contributor role to Admin1 will not meet the goal of enabling Traffic Analytics for the Azure subscription.

NaoVaz · Answer

B) "No"

One of the following Azure built-in roles needs to be assigned to your account:
	- Owner
	- Contributor
	- Reader
	- Network Contributor

Reference: https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements

V4 · Answer

Correct answer : A.
With Traffic Manager Contributor role you can manage Traffic Manager profiles, do traffic analysis but does not let you control who has access to them.

TDsysadmin · Answer

No..bcz Traffic Manager Contributor
Lets you manage Traffic Manager profiles, but does not let you control who has access to them.

zellck · Answer

B is the answer.

https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements
One of the following Azure built-in roles needs to be assigned to your account:
- Owner
- Contributor
- Reader
- Network Contributor

LPaul · Answer

Please read carefully "Traffic Manager " Contributor nothing to do with "Traffic Analytics" , is 2 different service .

dilopezat · Answer

To enable Traffic Analytics for an Azure subscription, you need to have one of the following Azure built-in roles assigned to your account:

Owner
Contributor
Network contributor
Monitoring contributor

https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics?wt.mc_id=knwlserapi_inproduct_azportal#prerequisites
https://learn.microsoft.com/en-us/azure/network-watcher/required-rbac-permissions?wt.mc_id=knwlserapi_inproduct_azportal#traffic-analytics

shako · Answer

Agreed with the 'No' answer. Prerequisite is : 
"Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor."
'Azure Traffic Manager contributor' is not mentioned

testmobile18 · Answer

Answer is correct.  Your account must meet one of the following to enable traffic analytics:

Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor.

adrian_borowski · Answer

There is no such Role 'Traffic Manager Contributor' so the answer must be NO. Please correct me if I'm wrong.

NzNagaraj · Answer

Apologies  - Traffic Manager Contributor  is  indeed a role but has  nothing to do  with  Traffic Analytics
"Traffic Manager has a predefined Azure role called "Traffic Manager Contributor", which you can assign to users. This role lets you manage Traffic Manager profiles.

Mozbius_ · Answer

Traffic analytics is accessible only to :
-Owner
-Contributor
-Reader (but cannot do any change so reader is not a valid RBAC for the question)
-Network contributor

https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics

Souban07 · Answer

The Traffic Manager Contributor role is specifically for managing Traffic Manager profiles and does not provide the necessary permissions to enable Traffic Analytics. Enabling Traffic Analytics requires the Network Contributor or higher role at the subscription level.

RVivek · Answer

To eanble Traffic manager one of there three RBAC reuired 1 Owner  2. Contributor   3.  	Network contributor 1 and Monitoring contributor 2

https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics#prerequisites

Jakub4444 · Answer

No, assigning the Traffic Manager Contributor role at the subscription level does not meet the goal.

The Traffic Manager Contributor role allows managing Azure Traffic Manager, which is used for DNS-based traffic routing. However, it does not provide the necessary permissions for enabling Traffic Analytics.

MrMacro · Answer

"No" looks like the correct answer.   I don't believe that the Traffic Analytics solution and creating traffic manager profiles are related.

Here are the relevant links:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-manage-profiles
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics-faq
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics

njain453 · Answer

Traffic Manager contributor lets you manage Traffic Manager profiles, but does not let you control who has access to them.

LG2240 · Answer

User access requirements
https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics

naxer82 · Answer

Hello here it says that the correct answer is NO. But in the
Question #33 Subject 2 says YES and in Question #49 Subject 2 says NO. Looking back, it's the same question. I'm a bit confused.

TheFivePips · Answer

The Traffic Manager Contributor role does not provide the necessary permissions to enable Traffic Analytics for an Azure subscription. To enable Traffic Analytics, you need permissions to configure and access the logs and data associated with network traffic.

Required Role:

Network Contributor or a custom role with permissions to configure Traffic Analytics and access diagnostic settings is typically needed for managing Traffic Analytics configurations.

Explanation:

Traffic Manager Contributor Role: This role allows users to manage Traffic Manager profiles and endpoints but does not grant access to configure Traffic Analytics or manage diagnostic settings.

Correct Answer: B. No

ricardona · Answer

No, assigning the Traffic Manager Contributor role to Admin1 at the subscription level will not meet the goal of enabling Traffic Analytics for the Azure subscription.

The Traffic Manager Contributor role only grants permissions to manage Traffic Manager profiles, endpoints, and traffic routing methods, but it does not provide the necessary permissions to enable Traffic Analytics for the Azure subscription.

To enable Traffic Analytics for an Azure subscription, you need to assign the Log Analytics Contributor role to the Azure AD user named Admin1. The Log Analytics Contributor role allows the user to manage Log Analytics workspaces, which is required to enable Traffic Analytics for the Azure subscription.

Therefore, assigning the Traffic Manager Contributor role to Admin1 will not meet the goal of enabling Traffic Analytics for the Azure subscription.

okamigo · Answer

so what's the right answer guys?

someonehad · Answer

Answer is B - NO

Required permissions are:

Microsoft.Network/connections/read
Microsoft.Network/loadBalancers/read
Microsoft.Network/localNetworkGateways/read
Microsoft.Network/networkInterfaces/read
Microsoft.Network/networkSecurityGroups/read
Microsoft.Network/publicIPAddresses/read
Microsoft.Network/routeTables/read
Microsoft.Network/virtualNetworkGateways/read
Microsoft.Network/virtualNetworks/read

And the ones provided by Traffic Manager contributor are:

"Microsoft.Authorization/*/read",
"Microsoft.Insights/alertRules/*",
"Microsoft.Network/trafficManagerProfiles/*",                    "Microsoft.ResourceHealth/availabilityStatuses/read",
"Microsoft.Resources/deployments/*",
"Microsoft.Resources/subscriptions/resourceGroups/read",
"Microsoft.Support/*"

Snownoodles · Answer

Traffic manager roles have nothing to do with traffic analytics
Traffic analytics requires account to have subscription level owner/contributor/reader/network contributor roles

NzNagaraj · Answer

Traffic Manager is a DNS Based Load Balancer nothing to do with any RBAC role

WS_21 · Answer

https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics#user-access-requirements

epomatti · Answer

Answer is correct, such role does not exist, only "Contributor"

mikica1 · Answer

Traffic Manager Contributor:
Description: Lets you manage Traffic Manager profiles, but does not let you control who has access to them.
Details:
Write
Create or Update Traffic Manager Profile 
Create a Traffic Manager profile, or modify the configuration of an existing Traffic Manager profile. This includes enabling or disabling a profile and modifying DNS settings, traffic

bcristella · Answer

Answer: No
Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, reader, or network contributor.

You have to consider the Traffic Analytics requires the following prerequisites:
A Network Watcher enabled subscription.
Network Security Group (NSG) flow logs enabled for the NSGs you want to monitor.
An Azure Storage account, to store raw flow logs.
An Azure Log Analytics workspace, with read and write access.
Your account must meet one of the following to enable traffic analytics:

naxer82 · Answer

Hello here it says that the correct answer is NO. But in the
Question #33 Subject 2 says YES and in Question #49 Subject 2 says NO. Looking back, it's the same question. I'm a bit confused.

tashakori · Answer

No is right

[Removed] · Answer

B is corerct

allinict_111 · Answer

Network Contributor: Required for enabling Traffic Analytics.

Traffic Manager Contributor: Manages Traffic Manager profiles and configurations, but not specific to Traffic Analytics.

4f45fce · Answer

No, this solution does not meet the goal. To enable Traffic Analytics for an Azure subscription, Admin1 requires the Network Contributor role at the subscription level—not the Traffic Manager Contributor role. The Network Contributor role provides the necessary permissions to manage network resources, including enabling Traffic Analytics.

AZ-104 Exam - Question 89

Discussion