nerdexam
Microsoft

AZ-204 · Question #228

You develop a solution that uses Azure Virtual Machines (VMs). The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource…

The correct answer is B. Use PowerShell on the VM to make a request to the local managed identity for Azure resources C. From the code on the VM, call Azure Resource Manager using an access token. https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure- resources/tutorial-windows-vm-access-arm

Submitted by stefanr· Mar 30, 2026Implement Azure security

Question

You develop a solution that uses Azure Virtual Machines (VMs). The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource Manager. You need to obtain an access token that uses the VMs system-assigned managed identity. Which two actions should you perform? Each correct answer presents part of the solution.

Options

  • AUse PowerShell on a remote machine to make a request to the local managed identity for Azure
  • BUse PowerShell on the VM to make a request to the local managed identity for Azure resources
  • CFrom the code on the VM, call Azure Resource Manager using an access token.
  • DFrom the code on the VM, call Azure Resource Manager using a SAS token.
  • EFrom the code on the VM, generate a user delegation SAS token.

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    73% (24)
  • D
    12% (4)
  • E
    9% (3)

Explanation

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure- resources/tutorial-windows-vm-access-arm

Topics

#Managed Identity#system-assigned identity#access token#Azure Resource Manager

Community Discussion

No community discussion yet for this question.

Full AZ-204 Practice