How should you configure the environment?

HOTSPOT
You are an Azure subscription administrator for your company.
Management asks you to add a contractor named User1 with a Microsoft account of User1@outlook.com to
manage DNS records but have no other permissions. The contractor is not in your Azure Active Directory
(Azure AD) but must be able to manage all of the DNS records in the Adatum zone. The Adatum zone is in the
ITManaged Resource Group.
You need to add the contractor.
How should you configure the environment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Answer:

Explanation:
Box 1: DNS Zone Contributor
The ‘DNS Zone Contributor’ role is a built-in role provided by Azure for managing DNS resources. Assigning
DNS Zone Contributor permissions to a user or group enables that group to manage DNS resources, but not
resources of any other type.
Box 2: Add User1@outlook.com
The simplest way to assign RBAC permissions is via the Azure portal. Open the ‘Access control (IAM)’ blade forthe resource group, then click ‘Add’, then select the ‘DNS Zone Contributor’ role and select the required users
or groups to grant permissions.
You can search the directory with display names, email addresses, and object identifiers.
https://docs.microsoft.com/en-us/azure/dns/dns-protect-zones-recordsets