Correct Answer: Azure Activity Log (filtered for 'Microsoft.Authorization/roleAssignments' operations)
Azure Activity Log records all control-plane operations, including RBAC role assignment changes (create/delete), with the caller identity, timestamp, and resource details. Filterin...
Correct Answer
Azure Activity Log (filtered for 'Microsoft.Authorization/roleAssignments' operations)
Why This Answer Is Correct
Azure Activity Log records all control-plane operations, including RBAC role assignment changes (create/delete), with the caller identity, timestamp, and resource details. Filtering for 'Microsoft.Authorization/roleAssignments' write and delete operations reveals exactly who made the change. Activity Log retains data for 90 days by default.
This question evaluates your knowledge of Azure Governance — a core concept tested in Microsoft Certified: Azure Security Engineer Associate (AZ-500). Understanding Azure Governance is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.