Exam SC-300 topic 3 question 55 discussion

Actual exam question from Microsoft's SC-300

Question #: 55
Topic #: 3

HOTSPOT
-

You have an Azure subscription that contains the resources shown in the following table.

You create a Microsoft Entra user named User1.

Which identities can you add to VM1 and App1? To answer, select the appropriate options in the answer area.

NOTE: Each correct answer is worth one point.

Show Suggested Answer

Suggested Answer:

by northgaterebel at Jan. 15, 2025, 7:36 p.m.

Comments

Submit Cancel

Obi_Wan_Jacoby

2 months ago

Considering this question (not question 50 or it's answers). Assuming User1 has not been assigned any roles and it just a user, then the answer to VM1 is Managed 1 and Managed 2 only (assuming User1 has not had any roles to it that would allow it to be added as a managed identity, such as Virtual Machine Administrator Login or Virtual Machine User Login). Answer to App1, you can use either SAMI or UAMI and User1 but only if specific roles were added to User1 (which I think we should not assume). However, the answers are odd as you cannot choose Managed 1 and Managed 2 as answers together. I think something is missing from the question, but it forced to choose I would go with the selected answer given already in box 2 for App1.

upvoted 1 times

...

YesPlease

3 months, 2 weeks ago

This question, nor the previous is providing enough information. According to Microsoft, you can assign a System-assigned identity or a User-assigned identity to both VM1 and to App1. (No, you can not set USER1 as a user-assigned identity.) We all know by now that you can only have one assigned System-assigned identity per resource and a User-assigned identity can be assigned to more than one resource. If I were to guess now with the answers provided...I would go with what ever combination is provided that limits it to Managed1 and Managed2: VM1 Answer: Managed1 and Managed2 ONLY APP1 Answer: A system-assigned managed identity and Managed2 ONLY

upvoted 2 times

YesPlease

3 months, 2 weeks ago

If the question was saying at the time of creation of VM1, then the only kind you can ENABLE is System-assigned identity...and then change it to a User-assigned identity after creation of VM1. If the question was saying at the time of creation of the APP1, by default you are not allowed to assign a managed identity...but you are able to do BOTH after it is created. VM info: https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/how-to-configure-managed-identities?pivots=qs-configure-portal-windows-vm App info: https://learn.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=portal%2Chttp

upvoted 1 times

...

northgaterebel

5 months, 1 week ago

Here we go again. Are Managed1 and Managed2 system-assigned or user-assigned managed identities? Without that key information we are guessing blindly at the answer.

upvoted 3 times

armid

4 months, 1 week ago

I am going to assume they are user managed and answer "Managed1 and Managed2 only" in the box for VM1. I think box for App1 is correct in the solution provided we are indeed talking about user managed identities

upvoted 2 times

Waiuku2123

4 months ago

App1 - Why wouldn't the answer be SAMI, Managed1 & Managed2 - given they are both the same type of identities (UAMI)?

upvoted 2 times

armid

4 months ago

i agree with you, but such answer is not in the options. Compare this to Q50 same topic, question is the same but the table with resources is different. I dont understand the table in Q50, but maybe it has something to do with the answers

upvoted 2 times

...