DP-420: Designing and Implementing Cloud-Native Applications Using Microsoft Azure Cosmos DBDemo

By Microsoft · Question Mode

QuestionQ143

Maintain an Azure Cosmos DB solution

You have an Azure subscription that includes a resource group named RG1. RG1 contains an Azure Cosmos DB for NoSQL account named account1.

You plan to audit changes to account1's control plane.

You need audit events to include the details of the security principal performing every control-plane change.

How should you complete the az command?

Select
az cosmosdb  --name Account1 --resource-group RG1
Explanation

az cosmosdb update updates an existing Azure Cosmos DB account. Setting --disable-key-based-metadata-write-access true blocks writes to metadata resources through account keys, requiring authenticated identity-based access so the security principal can be captured for auditing.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!