SC-300 Question #190: Real Exam Question with Answer & Explanation

Submitted by zhang_li· Mar 6, 2026Manage Azure identities and governance – specifically, managing access to Azure resources using role-based access control and integrating Azure AD authentication with Azure compute services.

Question

Drag and Drop Question You have a Microsoft 365 E5 subscription and an Azure subscription. You need to meet the following requirements: - Ensure that users can sign in to Azure virtual machines by using their Microsoft 365 credentials. - Delegate the ability to create new virtual machines. What should you use for each requirement? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Explanation

Azure Role-Based Access Control (Azure RBAC) is the correct answer for both requirements. For signing in to Azure VMs using Microsoft 365 credentials, you enable Azure AD login for VMs and then assign the 'Virtual Machine Administrator Login' or 'Virtual Machine User Login' RBAC role to users, allowing their Microsoft 365 (Azure AD) credentials to authenticate to the VM. For delegating VM creation, Azure RBAC provides built-in roles like 'Virtual Machine Contributor' that can be assigned to users or groups, granting them the ability to create and manage VMs without broader administrative privileges.

Topics

#Azure RBAC#Azure Virtual Machines#Identity and Access Management#Azure AD Authentication

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice Browse All SC-300 Questions