nerdexam
Microsoft

SC-300 · Question #316

You have an Azure subscription that contains a storage account named storage1. You plan to deploy an app named App1 that will be hosted on multiple virtual machines. The virtual machines will authenti

Sign in or unlock SC-300 to reveal the answer and full explanation for question #316. The question stem and answer options stay visible for context.

Submitted by stefanr· Mar 6, 2026Plan and implement workload identities

Question

You have an Azure subscription that contains a storage account named storage1. You plan to deploy an app named App1 that will be hosted on multiple virtual machines. The virtual machines will authenticate to a third-party API by using secrets. You need to recommend an authentication solution for the virtual machines. The solution must meet the following requirements:

  • Securely store secrets.
  • Ensure that credentials do NOT need to be stored in the App1 code.
  • Ensure that the virtual machines can access Azure resources by using

Microsoft Entra authentication

  • Minimize administrative effort.

What should you include in the recommendation?

Options

  • Auser accounts and Storage Service Encryption
  • Buser-assigned managed identities and Azure Key Vault
  • Cuser accounts and Azure Key Vault
  • Dsystem assigned managed identities and Storage Service Encryption

Unlock SC-300 to see the answer

You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#managed identity#Azure Key Vault#workload identity#secret management
Full SC-300 Practice