You have an Azure subscription that contains a user named User1. You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use the principle of least privilege. Which role-based access control (RBAC) role should you assign to User1? 

Answer options:

A. Owner
B. Virtual Machine Contributor
C. Contributor
D. Virtual Machine Administrator Login

B

Virtual Machine Contributor: Lets you manage virtual machines, but not access to them, and not the virtual network or storage account they`re connected to. Incorrect Answers: A: Owner: Grants full access to manage all resources, including the ability to assign roles in Azure RBAC. C: Contributor: Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC. D: Virtual Machine Administrator Login: View Virtual Machines in the portal and login as administrator. Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles