AZ-101 · Question #31
You have an Azure subscription named Subscription1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1. VM1 runs services that will be used to deploy resources to…
The correct answer is C. From the Azure portal, modify the value of the Managed Service Identity option for VM1. A managed identity from Azure Active Directory allows your app to easily access other AAD- protected resources such as Azure Key Vault. The identity is managed by the Azure platform and does not require you to provision or rotate any secrets. User assigned managed identities…
Question
You have an Azure subscription named Subscription1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1. VM1 runs services that will be used to deploy resources to RG1. You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1. What should you do first?
Options
- AFrom the Azure portal, modify the Access control (IAM) settings of VM1.
- BFrom the Azure portal, modify the Policies settings of RG1.
- CFrom the Azure portal, modify the value of the Managed Service Identity option for VM1.
- DFrom the Azure portal, modify the Access control (IAM) settings of RG1.
How the community answered
(29 responses)- A14% (4)
- B3% (1)
- C76% (22)
- D7% (2)
Explanation
A managed identity from Azure Active Directory allows your app to easily access other AAD- protected resources such as Azure Key Vault. The identity is managed by the Azure platform and does not require you to provision or rotate any secrets. User assigned managed identities can be used on Virtual Machines and Virtual Machine Scale https://docs.microsoft.com/en-us/azure/app-service/app-service-managed-service-identity
Topics
Community Discussion
No community discussion yet for this question.