Exam SC-300 topic 3 question 58 discussion

Answer: C. A managed identity Explanation: To ensure that VM1 and VM2 can retrieve data from SQL1 (Azure SQL Managed Instance) with minimal administrative effort, you should use Azure Managed Identity. ✅ Managed identities allow Azure resources (like VMs) to authenticate and access other Azure services (like SQL Managed Instance) securely without storing credentials. Why not the others? ❌ A. A certificate – While certificates can be used for authentication, managing them requires more administrative overhead than a managed identity. ❌ B. A shared access signature (SAS) token – SAS tokens are mainly used for Azure Storage access, not for authenticating to SQL Managed Instances. ❌ D. A Microsoft Entra user account – Entra ID users are meant for human authentication, while VM-to-SQL authentication should use workload identity solutions like managed identities.