Explanation:
VM1: Managed1 and Managed2 only
App1: A system-assigned managed identity and Managed2 only
Questions no: 269
Verified Answer:
* VM1: Managed1 and Managed2 only
* App1: A system-assigned managed identity and Managed2 only
Comprehensive and Detailed Explanation with all Microsoft SC-300: Identity and Access Administrator documents:
To answer this question, we must apply the principles of Managed Identities for Azure resources. Managed identities provide an automatically managed identity in Microsoft Entra ID for applications to use when connecting to resources that support Microsoft Entra authentication (like Azure Key Vault or SQL).
1. Understanding Identity Types:
* User Objects (User1): Standard user accounts are used for human sign-ins. You cannot assign a standard user object (like User1) as the identity of an Azure resource (like a VM or App Service). The resource must use a Service Principal or Managed Identity. Therefore, any option including User1 is incorrect.
* User-Assigned Managed Identities (Managed1, Managed2): These are standalone Azure resources that can be assigned to one or more Azure resources (like VMs or App Services).
* System-Assigned Managed Identities: These are enabled directly on the resource itself and share the resource's lifecycle.
2. Analysis for VM1:
* Azure Virtual Machines support User-assigned managed identities.
* You can assign multiple user-assigned identities to a single VM.
* Looking at the dropdown options for VM1:
* Options with User1 are invalid.
* This leaves Managed2 only or Managed1 and Managed2 only.
* Since both Managed1 and Managed2 are valid user-assigned identities available in the subscription, you can assign both.
* Conclusion: Select Managed1 and Managed2 only.
3. Analysis for App1:
* Azure App Services support both System-assigned and User-assigned managed identities concurrently.
* Looking at the dropdown options for App1:
* Options with User1 are invalid.
* Managed1 is not listed in the dropdown options (Managed identities must be in the same region as the resource; often this question implies a region mismatch, or simply restricts the choice).
* Managed2 is listed as a valid user-assigned option.
* A system-assigned managed identity is listed as a valid option.
* Since you can configure an App Service to use both its system-assigned identity and a user- assigned identity simultaneously, the most complete correct answer identifies all capable identities.
* Conclusion: Select A system-assigned managed identity and Managed2 only.
Reference Extract:
"Managed identities for Azure resources provide Azure services with an automatically managed identity in Azure Active Directory... There are two types of managed identities: System-assigned... and User-assigned...
You can assign a user-assigned managed identity to [Azure Virtual Machines and Azure App Service]." (Source: Microsoft Learn - What are managed identities for Azure resources?)