nerdexam
Microsoft

SC-300 · Question #283

You have an Azure subscription that contains a storage account named storage1 and a web app named WebApp1. WebApp1 uses a system-assigned managed identity. You need to ensure that WebApp1 can read…

The correct answer is C. the Access control (IAM) settings. In the Azure portal, go into your storage account to grant your web app access. Select Access control (IAM) in the left pane, and then select Role assignments. You'll see a list of who has access to the storage account. Now you want to add a role assignment to a robot, the app…

Submitted by hans_de· Mar 6, 2026Plan and implement workload identities

Question

You have an Azure subscription that contains a storage account named storage1 and a web app named WebApp1. WebApp1 uses a system-assigned managed identity. You need to ensure that WebApp1 can read and write files to storage1 by using the system- assigned managed identity. What should you configure for storage1 in the Azure portal?

Options

  • Adata protection
  • Ba shared access signature (SAS)
  • Cthe Access control (IAM) settings
  • Dthe File share settings
  • Eaccess keys

How the community answered

(23 responses)
  • A
    9% (2)
  • B
    9% (2)
  • C
    78% (18)
  • E
    4% (1)

Explanation

In the Azure portal, go into your storage account to grant your web app access. Select Access control (IAM) in the left pane, and then select Role assignments. You'll see a list of who has access to the storage account. Now you want to add a role assignment to a robot, the app service that needs access to the storage account. Select Add > Add role assignment to open the Add role assignment page. https://learn.microsoft.com/en-us/entra/identity-platform/multi-service-web-app-access- storage?tabs=azure-portal%2Cprogramming-language-csharp#grant-access-to-the-storage-

Topics

#system-assigned managed identity#storage account#IAM access control#RBAC

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice