Exam AZ-400 topic 4 question 64 discussion

B is the answer. https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview#managed-identity-types - User-assigned. You may also create a managed identity as a standalone Azure resource. You can create a user-assigned managed identity and assign it to one or more Azure Resources. When you enable a user-assigned managed identity: -- A service principal of a special type is created in Azure AD for the identity. The service principal is managed separately from the resources that use it. -- User-assigned identities can be used by multiple resources. -- You authorize the managed identity to have access to one or more services.

User assigned. Multiple resources. https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview#managed-identity-types

User assigned. Multiple resources. https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview#managed-identity-types

Multiple VMs. Automatic Credential Management.

B. a user-assigned managed identity M

User assigned Managed Identity

A is the answer: User-assigned. You may also create a managed identity as a standalone Azure resource. You can create a user-assigned managed identity and assign it to one or more Azure Resources. When you enable a user-assigned managed identity: A service principal of a special type is created in Microsoft Entra ID for the identity. The service principal is managed separately from the resources that use it. User-assigned identities can be used by multiple resources. You authorize the managed identity to have access to one or more services. https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/overview#managed-identity-types

This question was on my exam on September 12, 2023. Choosed B. Passed with 877.

On exam 2023-09-06, selected B. user-assigned managed identity Score 933

Answer A A system-assigned managed identity to configure Azure virtual machines to use a single identity with automatic credential management and support for granting privileges

User assigned managed identity. https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

B: User-assigned managed identity Can be associated with multiple Azure resources. Can manage credentials automatically. Created by you System-assigned managed identity Can only be associated with a single Azure resource. Can manage credentials automatically. Created automatically by Azure.

ChatGPT: B. a user-assigned managed identity. A user-assigned managed identity is an identity that you create as a standalone Azure resource and can be assigned to multiple Azure resources. It allows you to use the same identity across multiple virtual machines, providing consistent and centralized management.

I believe the answer is wrong. The correct answer should be "B - User-Assigned managed Identity" When creating a Service Principal you can only specify authentication using Credentials or Certificate. Its neves managed by azure (https://learn.microsoft.com/en-us/cli/azure/create-an-azure-service-principal-azure-cli#1-create-a-service-principal) Regarding Managed Identities it can only be Use-Assigned since, the System Assigned can only be used for 1 specific resource, while the User Assigned, can be used for multiple resources (in the question case 4 Virtual Machines)