Exam SC-300 topic 1 question 89 discussion

Actual exam question from Microsoft's SC-300

Question #: 89
Topic #: 1

You have an Azure subscription that contains an Azure Automation account named Automation1.

You need to grant Automation1 access to Azure resources. The solution must meet the following requirements:

• Ensure that any permissions granted to Automation1 are removed when the account is deleted.
• Minimize administrative effort.

What should you use?

A. a client secret
B. a system-assigned managed identity
C. a certificate
D. user-assigned managed identity

Show Suggested Answer

Suggested Answer: B 🗳️

by test123123 at Jan. 9, 2025, 1:08 p.m.

Comments

Submit Cancel

noa808a

5 months ago

Selected Answer: B

Key word/phrase here is permissions are removed when completed. Only system-assigned managed identity is capable of this.

upvoted 1 times

...

test123123

7 months, 1 week ago

Selected Answer: B

System-Assigned Managed Identity Lifecycle: Created and managed by Azure. The identity is tied to the lifecycle of the Azure resource (e.g., a virtual machine). When the resource is deleted, the identity is automatically deleted as well. Scope: Each system-assigned managed identity is unique to a single Azure resource. It cannot be shared across multiple resources. Use Case: Ideal for scenarios where you want the identity to be automatically managed and deleted with the resource1.

upvoted 3 times

...