Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft SC-300 Exam - Topic 1 Question 93 Discussion

You have an Azure subscription that contains a virtual machine named VM1 and an Azure key vault named Vault1. VM1 has a system-assigned managed identity. You need to ensure that VM1 can retrieve the values of secrets stored in Vault 1. The solution must minimize administrative effort. What should you do first?
D) Assign an Azure role to VM1.
A) Configure the Resource access settings for Vault1.
B) Configure the permissions model for Vault1
C) Add a user-assigned managed identity to VM1.

Microsoft SC-300 Exam - Topic 1 Question 93 Discussion

Actual exam question for Microsoft's SC-300 exam
Question #: 93
Topic #: 1
[All SC-300 Questions]

You have an Azure subscription that contains a virtual machine named VM1 and an Azure key vault named Vault1. VM1 has a system-assigned managed identity. You need to ensure that VM1 can retrieve the values of secrets stored in Vault 1. The solution must minimize administrative effort. What should you do first?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Jerry at Jun 23, 2024, 01:21 AM

Limited Time Offer

25%

Off

Get Premium SC-300 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Ernie
10 months ago
Really? I’m surprised it’s not just about setting access settings directly.
upvoted 0 times
...
Staci
10 months ago
I thought assigning a role to VM1 would work too.
upvoted 0 times
...
Myra
10 months ago
Wait, why not just use a user-assigned identity? Seems easier.
upvoted 0 times
...
Valentin
10 months ago
Totally agree, B is the way to go!
upvoted 0 times
...
Lorean
10 months ago
You need to configure the permissions model for Vault1 first.
upvoted 0 times
...
Tabetha
11 months ago
I thought adding a user-assigned managed identity was the way to go, but since VM1 already has a system-assigned one, I guess that's not needed.
upvoted 0 times
...
Moira
11 months ago
I practiced a similar question, and I feel like assigning an Azure role to VM1 might be necessary, but I’m not confident if that’s the first action.
upvoted 0 times
...
Josefa
11 months ago
I'm not entirely sure, but I remember something about resource access settings being important for managed identities. Could that be the first step?
upvoted 0 times
...
Odelia
11 months ago
I think we need to configure the permissions model for Vault1 first, right? That seems to be the logical step to allow access.
upvoted 0 times
...
Lucina
11 months ago
I'm a little confused by the options here. Adding a user-assigned managed identity or assigning an Azure role to the VM both seem like they would involve more administrative effort, which the question says we want to avoid. I'll need to double-check my understanding of these Azure identity and access management concepts.
upvoted 0 times
...
Reita
11 months ago
Okay, I've got an idea. Since the VM already has a system-assigned managed identity, I bet I can just configure the access settings for the Key Vault to allow that identity to retrieve the secrets. That seems like the simplest approach.
upvoted 0 times
...
Charlette
11 months ago
Hmm, I'm a bit unsure about this one. The question mentions a system-assigned managed identity, so I'm wondering if that's the key to the solution. I'll need to think through the different options carefully.
upvoted 0 times
...
Barrett
11 months ago
This looks like a straightforward question about managing access to an Azure Key Vault. I think the key is to minimize administrative effort, so I'll focus on the options that seem the most efficient.
upvoted 0 times
...
Latrice
12 months ago
Hmm, I'm a bit confused by the use of `await` here. I'll need to double-check how that works with multiple promises.
upvoted 0 times
...
Brandon
2 years ago
Hold up, is this a trick question? I'm pretty sure the answer is to just give VM1 the keys to Vault1 and call it a day. Minimize administrative effort, am I right?
upvoted 0 times
...
Alethea
2 years ago
C is the solution. Adding a user-assigned managed identity to VM1 is the best way to authenticate and authorize access to Vault1. Managed identities are so much easier than manual credential management.
upvoted 0 times
Daryl
2 years ago
Managed identities are so much easier than manual credential management.
upvoted 0 times
...
Claribel
2 years ago
C is the solution. Adding a user-assigned managed identity to VM1 is the best way to authenticate and authorize access to Vault1.
upvoted 0 times
...
...
Darnell
2 years ago
B is the way to go. Configuring the permissions model for Vault1 is crucial to control access to the secrets. We don't want just anyone snooping around in there!
upvoted 0 times
Elliot
2 years ago
B is the way to go. Configuring the permissions model for Vault1 is crucial to control access to the secrets. We don't want just anyone snooping around in there!
upvoted 0 times
...
Alberto
2 years ago
A) Configure the Resource access settings for Vault1
upvoted 0 times
...
William
2 years ago
B) Configure the permissions model for Vault1
upvoted 0 times
...
Laurel
2 years ago
D) Assign an Azure role to VM1
upvoted 0 times
...
Dana
2 years ago
Absolutely, we need to make sure only the right people have access.
upvoted 0 times
...
Kristofer
2 years ago
B) Configure the permissions model for Vault1
upvoted 0 times
...
...
Kiera
2 years ago
I agree with Tanja, assigning an Azure role to VM1 seems like the most efficient solution to minimize administrative effort.
upvoted 0 times
...
Tanja
2 years ago
But wouldn't assigning an Azure role to VM1 be a better option to ensure it can retrieve the values of secrets stored in Vault1?
upvoted 0 times
...
Melita
2 years ago
I disagree, I believe we should add a user-assigned managed identity to VM1 first.
upvoted 0 times
...
Felton
2 years ago
D sounds good to me. Assigning an Azure role to VM1 is the best way to grant the necessary permissions to access Vault1. It's the most secure and scalable option.
upvoted 0 times
Ashlee
2 years ago
I agree, assigning an Azure role to VM1 is the way to go. It's the most efficient way to ensure VM1 can retrieve the values of secrets stored in Vault1.
upvoted 0 times
...
Jade
2 years ago
D sounds good to me. Assigning an Azure role to VM1 is the best way to grant the necessary permissions to access Vault1. It's the most secure and scalable option.
upvoted 0 times
...
...
Tanja
2 years ago
I think the first thing we should do is configure the Resource access settings for Vault1.
upvoted 0 times
...
Gilberto
2 years ago
I think the answer is A. Configuring the Resource access settings for Vault1 is the first step to ensure VM1 can access the secrets in Vault1. This is the most straightforward approach.
upvoted 0 times
Ivette
2 years ago
D) Assign an Azure role to VM1.
upvoted 0 times
...
Nobuko
2 years ago
C) Add a user-assigned managed identity to VM1.
upvoted 0 times
...
Corazon
2 years ago
B) Configure the permissions model for Vault1
upvoted 0 times
...
Coleen
2 years ago
A) Configure the Resource access settings for Vault1.
upvoted 0 times
...
...

Save Cancel