ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-204 All Questions

View all questions & answers for the AZ-204 exam
Go to Exam

Exam AZ-204 topic 6 question 32 discussion

Actual exam question from Microsoft's AZ-204
Question #: 32
Topic #: 6
[All AZ-204 Questions]

You develop a solution that uses Azure Virtual Machines (VMs).
The VMs contain code that must access resources in an Azure resource group. You grant the VM access to the resource group in Resource Manager.
You need to obtain an access token that uses the VM's system-assigned managed identity.
Which two actions should you perform? Each correct answer presents part of the solution.

  • A. From the code on the VM, call Azure Resource Manager using an access token.
  • B. Use PowerShell on a remote machine to make a request to the local managed identity for Azure resources endpoint.
  • C. Use PowerShell on the VM to make a request to the local managed identity for Azure resources endpoint.
  • D. From the code on the VM, call Azure Resource Manager using a SAS token.
  • E. From the code on the VM, generate a user delegation SAS token.
Show Suggested Answer Hide Answer
Suggested Answer: AC 🗳️
by le129 at Sept. 1, 2022, 6:35 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
le129
Highly Voted 2 years, 7 months ago
Selected Answer: AC
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm
upvoted 23 times
...
Ciupaz
Highly Voted 1 year, 4 months ago
VM are not out-of-scope for AZ-204 exam?
upvoted 7 times
...
Vichu_1607
Most Recent 5 months, 1 week ago
Selected Answer: AC
A. From the code on the VM, call Azure Resource Manager using an access token. C. Use PowerShell on the VM to make a request to the local managed identity for Azure resources endpoint.
upvoted 1 times
...
CarlosTheBoldest
1 year, 4 months ago
Selected Answer: AC
What makes C and not B the correct answer is the "remote machine" versus VM. It takes me a while to realize about it. Hope this help others
upvoted 2 times
...
Razvan_C
1 year, 5 months ago
I am pretty sure VMs are out from AZ-204.
upvoted 1 times
...
dddddd111
1 year, 6 months ago
Selected Answer: AC
A and C are correct answers.
upvoted 1 times
...
aragones
1 year, 11 months ago
Got this 2023-05-12. my cases: case: You need to configure authorization. case: You need to ensure the app does not time out and processes the blob data case study: VanArsdel Inc Canada
upvoted 4 times
...
adilkhan
2 years ago
A, C chatGPT
upvoted 1 times
...
red0400
2 years, 1 month ago
Selected Answer: AC
Two parts of the question - Code, Powershell, for code version, A is definitely the choice, and for PowerShell, since it's for virtual machine, we will do it for virtual machine, so it's C.
upvoted 2 times
...
adilkhan
2 years, 1 month ago
AC chatGPT
upvoted 1 times
...
Bear_Polar
2 years, 5 months ago
Selected Answer: AC
a and c
upvoted 1 times
...
OPT_001122
2 years, 5 months ago
Selected Answer: AC
a and c
upvoted 2 times
POOOJAAAAAAAAAA
2 years, 4 months ago
IMO .. option B Now that you've created a Remote Desktop Connection with the virtual machine, open PowerShell in the remote session. Using the Invoke-WebRequest cmdlet, make a request to the local managed identity for Azure resources endpoint to get an access token for Azure Resource Manager. Reference: https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm
upvoted 1 times
POOOJAAAAAAAAAA
2 years, 4 months ago
My bad its A and C
upvoted 2 times
...
...
...
lombster
2 years, 6 months ago
Selected Answer: AC
From le129 link 1. Call local managed identity: C $response = Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://management.azure.com/' -Method GET -Headers @{Metadata="true"} 2. Extract token and call Azure Resource Manager using the access token: A (Invoke-WebRequest -Uri https://management.azure.com/subscriptions/<SUBSCRIPTION ID>/resourceGroups/<RESOURCE GROUP>?api-version=2016-06-01 -Method GET -ContentType "application/json" -Headers @{ Authorization ="Bearer $ArmToken"}).content
upvoted 5 times
...
VACAS
2 years, 7 months ago
Selected Answer: AC
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago