フリー問題

問題文

You create a custom Azure role. Which two statements about the actions and notActions properties are correct? (Select two.)

選択肢

1. notActions subtracts permissions from what actions grants; it is not a deny rule that overrides other role assignments.
2. The assignableScopes property determines where the role definition can be assigned, and must be set explicitly for a custom role.
3. A custom role automatically inherits new permissions that Microsoft later adds to the built-in role it was copied from.
4. notActions acts as an explicit deny that overrides any other role assignment granting the same action.
5. dataActions and actions can be combined in a single role definition without restriction.