Microsoft AZ-204 Exam - Topic 18 Question 18 Discussion

Actual exam question for Microsoft's AZ-204 exam

Question #: 18
Topic #: 18

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You develop Azure solutions.

You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.

You need to obtain an Azure Resource Manager access token.

Solution: Use the Reader role-based access control (RBAC) role to authenticate the VM with Azure Resource Manager.

Does the solution meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

Instead run the Invoke-RestMethod cmdlet to make a request to the local managed identity for Azure resources endpoint.

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm

by Heike at May 08, 2022, 10:19 AM

Limited Time Offer

25%

Off

Get Premium AZ-204 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rochell

5 months ago

Just to clarify, you need a role with write permissions for that.

upvoted 0 times

...

Ceola

5 months ago

Nope, definitely not the right solution.

upvoted 0 times

...

Glenna

5 months ago

Wait, I thought Reader could do more than just read?

upvoted 0 times

...

Marla

5 months ago

Totally agree, this won't work for access tokens.

upvoted 0 times

...

Belen

6 months ago

The Reader role only allows read access, not token generation.

upvoted 0 times

...

Arlene

6 months ago

I vaguely recall that we need a role that allows more than just reading. I’m leaning towards "No" for this one.

upvoted 0 times

...

Tula

6 months ago

I feel like the Reader role only allows viewing resources, not accessing them. So, I think this solution might not meet the goal.

upvoted 0 times

...

Marya

6 months ago

I think we practiced a similar question where we had to use a different role for VM access. Maybe Contributor would be better?

upvoted 0 times

...

Vi

6 months ago

I remember studying RBAC roles, but I'm not sure if the Reader role is enough for accessing resources.

upvoted 0 times

...

Sanjuana

6 months ago

I'm not totally sure about this one. The question is asking what type of attack to launch, but it seems like there could be a few different options. I'll have to think it through carefully.

upvoted 0 times

...

Kassandra

6 months ago

This question seems straightforward, but I want to make sure I understand the key points before answering.

upvoted 0 times

...

Nickolas

6 months ago

I'm a bit confused by this question. The requirement for traffic information instead of protocol data is throwing me off. I'll need to review the differences between these probe types to make sure I understand which one is the best fit.

upvoted 0 times

...

Gabriele

6 months ago

Mobile marketing is an interesting one, but I don't think it qualifies as a traditional channel. Those are usually more offline, physical methods. I'm leaning towards billboard ads as the traditional choice.

upvoted 0 times

...