Exam AZ-800 topic 2 question 7 discussion

"For the machine to authenticate to the Guest Configuration service, the machine must have a System-Assigned Managed Identity." (see the given reference, https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/guest-configuration)

Still valid, in exam on 23rd Aug'22

I tested Configuration Management for Azure VM,I could select system managed ID or User managed ID. So the answers are B and C.

To use the Azure Policy guest configuration feature to manage VM1, you need to ensure that VM1 is configured to use a system-assigned managed identity. Therefore, the correct answer is: C. Configure VM1 to use a system-assigned managed identity.

Managed Identity: By configuring VM1 to use a system-assigned managed identity, you provide it with an identity within Azure Active Directory (Azure AD). This identity can be used for authentication when interacting with Azure services. Azure Policy: Azure Policy can leverage managed identities to interact with VMs and enforce guest configurations. When a system-assigned managed identity is enabled on a VM, it simplifies the authentication process, and Azure Policy can use this identity to assess and enforce configurations on the VM. So, by configuring VM1 to use a system-assigned managed identity, you enable Azure Policy Guest Configuration to manage and enforce policies on VM1 effectively.

C for correct and provided link supports it

A system-assigned managed identity for an Azure virtual machine enables the virtual machine to use Azure services that support Azure AD authentication, without having to store the credentials in the application code. In order to use the Azure Policy guest configuration feature to manage VM1, you need to configure the virtual machine to use a system-assigned managed identity. Once the system-assigned managed identity is enabled, you can assign the necessary permissions to the managed identity and use Azure Policy guest configuration to manage the virtual machine's configuration.

Microsoft are mean. They know we're learning about Desired State Configuration (DSC) as part of the objectives so they throw in it as an answer even though it is not at all relevant.

the correct answer is C

Answer is SYSTEM MANAGED IDENTITY The identity is used to authenticate the machine as it reads and writes to the guest configuration service. The extension isn't required for Arc-enabled servers because it's included in the Arc Connected Machine agent.