Microsoft
AZ-204 · Question #595
Drag and Drop Question You have an Azure Virtual Machine (VM) named VM1 running Windows Server 2022 and an Azure Key Vault instance named kv1. You are developing a .NET application named App1 that you
Sign in or unlock AZ-204 to reveal the answer and full explanation for question #595. The question stem and answer options stay visible for context.
Submitted by fatema_kw· Mar 30, 2026Implement Azure security - specifically implementing managed identities for Azure resources and configuring access to Azure Key Vault using identity-based authentication.
Question
Drag and Drop Question You have an Azure Virtual Machine (VM) named VM1 running Windows Server 2022 and an Azure Key Vault instance named kv1. You are developing a .NET application named App1 that you plan to deploy to VM1. You have the following requirements: - App1 will require access to kv1. - The identity used by App1 to access kv1 must be automatically deprovisioned when VM1 is deleted. You need to identify the procedure that will meet the requirements. Which three actions should you include in the procedure? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:
Exhibit
Answer Area
Drag items
Create a user-assigned managed identity for the VM.Modify access policy on kv1.Retrieve an access token from Azure Instance Metadata endpoint.Create a system-assigned managed identity for the VM.Retrieve an access token from the Microsoft identity platform endpoint.
Unlock AZ-204 to see the answer
You've previewed enough free AZ-204 questions. Unlock AZ-204 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Managed Identity#Azure Key Vault#Azure Virtual Machines#Microsoft Entra ID