StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Identity and access

Practice question 65 of 400 · hard

A custom role excludes an operation with NotActions, but another applicable role grants that operation. What should the architect conclude?

Choose the single best answer.

  1. A.NotActions limits its own role grant and does not explicitly deny the other grant.
  2. B.The permission depends only on which role name sorts first.
  3. C.Custom roles always override built-in roles.
  4. D.NotActions is a universal deny across every role assignment.
Show the answer and explanation

✓ Correct answer

  • NotActions limits its own role grant and does not explicitly deny the other grant.

NotActions subtracts from the permissions of that role definition, while another applicable role can still grant the operation. It is not a universal denial. Custom roles have no blanket precedence over built-ins, and role-name order is irrelevant to authorization. Source: AZ-305 Study Guide.pdf, PDF page(s) 16.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.