ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-103 All Questions

View all questions & answers for the AZ-103 exam
Go to Exam

Exam AZ-103 topic 4 question 40 discussion

Actual exam question from Microsoft's AZ-103
Question #: 40
Topic #: 4
[All AZ-103 Questions]

You have an Azure subscription named Subscription1 that contains an Azure virtual network named VM1. VM1 is in a resource group named RG1.
VM1 runs services that will be used to deploy resources to RG1.
You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1.
What should you do first?

  • A. From the Azure portal, modify the Access control (IAM) settings of RG1.
  • B. From the Azure portal, modify the Policies settings of RG1.
  • C. From the Azure portal, modify the Access control (IAM) settings of VM1.
  • D. From the Azure portal, modify the value of the Managed Service Identity option for VM1.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
The managed identities for Azure resources feature in Azure Active Directory (Azure AD) solves this problem. The feature provides Azure services with an automatically managed identity in Azure AD. You can use the identity to authenticate to any service that supports Azure AD authentication, including Key Vault, without any credentials in your code.
References:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
by joseluismantilla at May 25, 2020, 11:15 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ACSC
Highly Voted 4 years, 7 months ago
The answer D is correct. Before you modify access control you must enable a system assigned managed identity on VM1
upvoted 12 times
...
raj10207
Highly Voted 4 years, 6 months ago
Came in Exam , Exam given on 06.07.2020
upvoted 8 times
User3000
4 years, 5 months ago
Can you please confirm if we have still have the Labs in the exam ?
upvoted 1 times
robert5874
4 years, 5 months ago
I don't believe so, based on 2 exams in the last week.
upvoted 1 times
...
asingh94
4 years, 5 months ago
No labs
upvoted 2 times
...
...
...
JPA210
Most Recent 2 months, 3 weeks ago
Selected Answer: A
I agree that Dnis correct, but according to this tutorial to achieve what is requested you use option A - From the Azure portal, modify the Access control (IAM) settings of RG1 https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/tutorial-windows-vm-access?pivots=windows-vm-access-wvm
upvoted 1 times
...
tashakori
10 months ago
D is right
upvoted 1 times
...
photon99
1 year, 2 months ago
I misread the question. I thought the System assigned identity was already in place. If this was the case then we must asisgn the RBAC permission on the SAMI else it wont be able to deploy the VM hence the asnwer would have : A. From the Azure portal, modify the Access control (IAM) settings of RG1.
upvoted 1 times
...
roanbaga
4 years, 3 months ago
VM1 is a virtua network.
upvoted 1 times
...
HillJoseph
4 years, 4 months ago
We all need a big D energy
upvoted 6 times
...
Xtian_ar
4 years, 4 months ago
typo: virtual network named VM1?
upvoted 1 times
JohnnyBGood
4 years, 4 months ago
good catch..
upvoted 1 times
...
...
Ralgh
4 years, 5 months ago
It should be D, when you assign a system managed role assignment it prompts for a scope type here change to RG and can choose the role for the VM
upvoted 2 times
...
AzExam2020
4 years, 6 months ago
D is the correct answer.
upvoted 1 times
...
YPR
4 years, 6 months ago
keyword is "services inside the vm" So answer is D.
upvoted 3 times
...
JhonyTrujillo
4 years, 7 months ago
D is the correct answer. First, we need to grant this VM’s system-assigned managed identity. https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm
upvoted 4 times
Hanuman
4 years, 6 months ago
correct
upvoted 1 times
...
praveen97
4 years, 6 months ago
Agree. We need to enable System assigned Identify in VM.
upvoted 1 times
...
...
WynterTsai
4 years, 7 months ago
Vote for D. A managed identity from Azure Active Directory allows your app to easily access other AAD-protected resources such as Azure Key Vault. The identity is managed by the Azure platform and does not require you to provision or rotate any secrets.
upvoted 4 times
...
maku067
4 years, 7 months ago
D https://docs.microsoft.com/en-US/azure/active-directory/managed-identities-azure-resources/qs-configure-portal-windows-vm
upvoted 3 times
...
nfett
4 years, 7 months ago
A is the correct answer. you can allow the VM access to the RG form there.
upvoted 2 times
...
joseluismantilla
4 years, 7 months ago
A is the answer
upvoted 3 times
JPA210
2 months, 3 weeks ago
And that is waht makes more sense, you want to give access to the RG, so you go to that option.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago