Exam AZ-303 topic 5 question 6 discussion

Correct answer: D First you have to give identity to VM1. • Navigate to the desired Virtual Machine and select Identity. • Under System assigned, Status, select On and then click Save Then you can modify the access control settings of RG1. (Option A)

The answer should be A. there is no such thing as "modify the value of the Managed Service Identity option for VM1". Basing on the question, the VM Id should already be there.

Answer: D is correct before grant RG1 services access to VM1 need to create VM1 managed Identity.

On exam 23 Dec 2021, I chose D

D. There are two ways, systems and managed identity. Both needs to be manually enabled first. In this case, only 1 answer indicate this fact.

Correct answer: D

Using managed identities for Azure resources, your code can get access tokens to authenticate to resources that support Azure AD authentication. The Azure Resource Manager supports Azure AD authentication. First, you need to grant this VM’s system-assigned managed identity access to a resource in Resource Manager https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview Answer is D

Vague wording, but I think with D it's meant System/User assigned identity. I'm going with D.

I don't know what "Modify the value of ..." means. But you can go to IAM in RG or Identiy in VM to assign permission for the managed identity (there is a button called Azure role assignments) there.

Please let me know how the launch goes and any customer feedback and/or quotes

I'd go for A as well. The wording on D describes assigning the identity when creating the VM: https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vm#system-assigned-managed-identity Since the VM already exists and the question implies the identity already exists. A makes more sense.

Answer A... 'Grant your VM access to a resource group in Resource Manager' https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm

After D, the next step is A; ie, to modify the IAM of RG1 for VM1.

D is correct and next step is C ( A & B is not right) D reference: https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vm#enable-system-assigned-managed-identity-during-creation-of-a-vm C reference: https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm#grant-your-vm-access-to-a-resource-group-in-resource-manager

Both A and D correct!