nerdexam
Microsoft

SC-300 · Question #183

Hotspot Question You have an Azure subscription that contains the following virtual machine: - Name: V1 - Azure region: East US - System-assigned managed identity: Disabled You create the managed…

The correct answer is You can assign Managed2 to V1. = Yes; You can assign Managed3 to V1. = Yes; You can assign VM1 the Owner role for RG1. = No. User-assigned managed identities are independent resources that can be assigned to multiple VMs simultaneously, regardless of region - so both Managed2 and Managed3 can be assigned to V1 even though Managed1 is already assigned (a VM can have multiple user-assigned managed…

Submitted by mike_84· Mar 6, 2026Manage Azure identities and governance - specifically managing access to Azure resources using managed identities and role-based access control (RBAC), covered under AZ-104 Objective: Manage Azure Active Directory (Entra ID) identities and secure access.

Question

Hotspot Question You have an Azure subscription that contains the following virtual machine: - Name: V1 - Azure region: East US - System-assigned managed identity: Disabled You create the managed identities shown in the following table. You perform the following actions: - Assign Managed1 to V1. - Create a resource group named RG1 in the West US region. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibit

SC-300 question #183 exhibit

Answer Area

  • You can assign Managed2 to V1.Yes
  • You can assign Managed3 to V1.Yes
  • You can assign VM1 the Owner role for RG1.No

Explanation

User-assigned managed identities are independent resources that can be assigned to multiple VMs simultaneously, regardless of region - so both Managed2 and Managed3 can be assigned to V1 even though Managed1 is already assigned (a VM can have multiple user-assigned managed identities). For the third statement, the question asks about assigning 'VM1' (not V1) the Owner role for RG1, but there is no VM named 'VM1' in the subscription - the VM is named 'V1', making this action impossible as stated. Additionally, even if it were V1, the system-assigned managed identity is disabled, so only the user-assigned identity (Managed1) could be granted roles, not 'VM1' itself as an entity.

Topics

#Managed Identities#Azure RBAC#User-Assigned Identity#Azure Virtual Machines

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SC-300 Practice