nerdexam
Microsoft

SC-300 · Question #363

Hotspot Question You have an Azure subscription that contains a resource group named RG1. RG1 contains two virtual machines named VM1 and VM2 that have Microsoft Entra ID login enabled. The…

The correct answer is VM1:: User1 and User3 only; VM2:: User1 only. This question tests knowledge of Azure RBAC roles and Microsoft Entra ID login for virtual machines. The Virtual Machine Administrator Login and Virtual Machine User Login roles control who can sign in to Entra ID-enabled VMs - Administrator Login grants local admin access…

Submitted by anjalisingh· Mar 6, 2026Manage Azure identities and governance - specifically managing authorization using Azure Role-Based Access Control (RBAC) and understanding data plane vs. management plane permissions for Azure resources including VMs and Key Vault.

Question

Hotspot Question You have an Azure subscription that contains a resource group named RG1. RG1 contains two virtual machines named VM1 and VM2 that have Microsoft Entra ID login enabled. The subscription contains the users shown in the following table. Which users can sign in to VM1, and which users can sign in to VM2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:

Exhibit

SC-300 question #363 exhibit

Answer Area

  • VM1:User1 and User3 only
    User1 onlyUser2 onlyUser3 onlyUser1 and User3 onlyUser2 and User3 onlyUser1, User2, and User3
  • VM2:User1 only
    User1 onlyUser2 onlyUser3 onlyUser1 and User3 onlyUser2 and User3 onlyUser1, User2, and User3

How the community answered

(1 responses)
  • User3 only|User2 only
    100% (1)

Explanation

This question tests knowledge of Azure RBAC roles and Microsoft Entra ID login for virtual machines. The Virtual Machine Administrator Login and Virtual Machine User Login roles control who can sign in to Entra ID-enabled VMs - Administrator Login grants local admin access while User Login grants standard user access. RBAC roles are inherited from parent scopes (subscription → resource group → resource), so assignments at the resource group or subscription level propagate down to individual VMs, while a role scoped to a specific VM only grants access to that VM.

Topics

#Azure RBAC#Microsoft Entra ID#Key Vault Access Control#Virtual Machine Login Roles

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice