Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 2 question 74 discussion

Actual exam question from Microsoft's AZ-500

Question #: 74
Topic #: 2

You have an Azure subscription that contains the resources shown in the following table.

You plan to deploy the virtual machines shown in the following table.

You need to assign managed identities to the virtual machines. The solution must meet the following requirements:
✑ Assign each virtual machine the required roles.
✑ Use the principle of least privilege.
What is the minimum number of managed identities required?

A. 1
B. 2
C. 3
D. 4

Show Suggested Answer

Suggested Answer: B 🗳️

by Henry56351 at April 26, 2022, 7:27 a.m.

Comments

Submit Cancel

ltjones12

Highly Voted 2 years, 1 month ago

If it's a system assigned managed id, it can only be tied to one resource. If you use a user assigned managed ID, it can be tied to multiple resources. Since there are 2 separate policies required, you can assign a user assigned managed ID for each policies. B is correct

upvoted 11 times

...

matt3p3

Most Recent 1 year ago

Selected Answer: B

definitely B

upvoted 1 times

...

flafernan

1 year, 1 month ago

Selected Answer: B

B - An Azure Managed Identity can be associated with resources including virtual machines, Azure functions, etc. Therefore, it is possible to have a single Managed Identity linked to multiple virtual machines or other resources within Azure.

upvoted 2 times

...

JunetGoyal

1 year, 3 months ago

4, Managed Identity can tie to on resource only

upvoted 1 times

...

heatfan900

1 year, 5 months ago

YOU CREATE ONE USER-ASSIGNED MI FOR VM 1 AND VM 2 AND ANOTHER FOR VM 3 AND VM4. THIS WAY VM 1 AND VM2 DO NOT HAVE ACCESS KEY VAULT 2.

upvoted 1 times

...

zellck

1 year, 8 months ago

Selected Answer: B

B is the answer. https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview#managed-identity-types - User-assigned. You may also create a managed identity as a standalone Azure resource. You can create a user-assigned managed identity and assign it to one or more Azure Resources.

upvoted 2 times

...

icebw22

1 year, 10 months ago

Correct, only two needed VM1 and VM2, same permission, and vm3 and vm4 same as well therefore only need 2

upvoted 1 times

...

majstor86

1 year, 11 months ago

Selected Answer: B

B. 2 managed identities

upvoted 1 times

...

F117A_Stealth

2 years, 2 months ago

Selected Answer: B

Just 2 is required.

upvoted 3 times

...

Te2ya

2 years, 3 months ago

As this table explained, Managed ID can not be shared multiple resources. So 4 Managed ID should be the answer

upvoted 2 times

arseyam

2 years, 3 months ago

You really need to read about manager identities again.

upvoted 5 times

...

Ajdlfasudfo0

2 years, 1 month ago

Satz mit X, das war wohl nix

upvoted 1 times

...

wsrudmen

2 years, 3 months ago

Selected Answer: B

Correct

upvoted 1 times

...

somenick

2 years, 4 months ago

Selected Answer: B

Pre-create 2 MIs with required permissions and then assign a user-assigned managed identity to existing VMs.

upvoted 1 times

...

domtopics

2 years, 4 months ago

Selected Answer: B

Two are needed.

upvoted 1 times

...

queenbea

2 years, 4 months ago

I belive the answer is 2

upvoted 1 times

...

Amit3

2 years, 4 months ago

Given Answer is correct

upvoted 1 times

...

JakeCallham

2 years, 4 months ago

Selected Answer: A

I disagree. I could create one managed identity and use that for both settings. I would not do it in real world, but it's possible. We dont need two MI, In keayvult you can add a MI for a specific role and also use that same MI for a role in storage account. So answer is wrong imho.

upvoted 2 times