Microsoft AZ-204 Exam - Topic 4 Question 129 Discussion

Actual exam question for Microsoft's AZ-204 exam

Question #: 129
Topic #: 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You develop Azure solutions.

You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.

You need to obtain an Azure Resource Manager access token.

Solution: Run the Invoke-RestMethod cmdlet to make a request to the local managed identity for Azure resources endpoint.

Does the solution meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: A

Get an access token using the VM's system-assigned managed identity and use it to call Azure Resource Manager

You will need to use PowerShell in this portion.

In the portal, navigate to Virtual Machines and go to your Windows virtual machine and in the Overview, click Connect.

Enter in your Username and Password for which you added when you created the Windows VM.

Now that you have created a Remote Desktop Connection with the virtual machine, open PowerShell in the remote session.

Using the Invoke-WebRequest cmdlet, make a request to the local managed identity for Azure resources endpoint to get an access token for Azure Resource Manager.

Example:

$response = Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://management.azure.com/' -Method GET -Headers @{Metadata='true'}

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm

by Kristofer at Mar 31, 2026, 01:16 PM

Limited Time Offer

25%

Off

Get Premium AZ-204 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joanna

21 hours ago

I’m pretty confident that using the local managed identity endpoint is correct, but I’m unsure if Invoke-RestMethod is the best cmdlet for this.

upvoted 0 times

...

Gary

6 days ago

I feel like this solution might not meet the goal because I thought managed identities required a different method for token retrieval.

upvoted 0 times

...

Sherita

11 days ago

I remember practicing a similar question where we had to use managed identities, and I think we did use Invoke-RestMethod, but I can't recall the specifics.

upvoted 0 times

...

Marisha

16 days ago

I think using Invoke-RestMethod is a common way to interact with Azure APIs, but I'm not entirely sure if it's the right approach for managed identities.

upvoted 0 times

...