Microsoft AZ-500 Exam - Topic 6 Question 20 Discussion

Actual exam question for Microsoft's AZ-500 exam

Question #: 20
Topic #: 6

[All AZ-500 Questions]

You have an Azure subscription that contains the resources shown in the following table.

You plan to deploy the virtual machines shown in the following table.

You need to assign managed identities to the virtual machines. The solution must meet the following requirements:

Assign each virtual machine the required roles.

Use the principle of least privilege.

What is the minimum number of managed identities required?

Show Suggested Answer

Suggested Answer: B

We have two different sets of required permissions. VM1 and VM2 have the same permission requirements. VM3 and VM4 have the same permission requirements.

A user-assigned managed identity can be assigned to one or many resources. By using user-assigned managed identities, we can create just two managed identities: one with the permission requirements for VM1 and VM2 and the other with the permission requirements for VM3 and VM4.

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

by Donte at May 03, 2022, 08:18 AM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mollie

4 months ago

Wait, are we sure about the least privilege thing? Sounds tricky.

upvoted 0 times

...

Dalene

4 months ago

Really? I thought it would be 4. Seems excessive!

upvoted 0 times

...

Tegan

5 months ago

I’m pretty sure it’s 3. Gotta cover all roles!

upvoted 0 times

...

Bette

5 months ago

Nah, I believe it's 2. Each VM needs its own identity.

upvoted 0 times

...

Felix

5 months ago

I think you only need 1 managed identity for this.

upvoted 0 times

...

Derrick

5 months ago

I vaguely remember that if VMs have different roles, we might need separate identities for each. So, I’m leaning towards three or four identities.

upvoted 0 times

...

Inocencia

5 months ago

I think we practiced a similar question where we had to assign roles based on least privilege. I feel like it might be two identities, but I can't recall the specifics.

upvoted 0 times

...

Mendy

5 months ago

I remember something about managed identities, but I'm not sure if each VM needs its own identity or if they can share.

upvoted 0 times

...

Naomi

5 months ago

I’m a bit confused about how many roles each VM needs. If they all need different roles, does that mean we need more identities?

upvoted 0 times

...

Tamie

5 months ago

Okay, let's see. The function is comparing the substring "bar" starting from index 3 in "foobar". I think the answer is A, -1.

upvoted 0 times

...

Fannie

5 months ago

I practiced a question similar to this, and I believe it was restriction tables that controlled access to long-distance calls.

upvoted 0 times

...

Chau

5 months ago

I remember reading something about not setting master APs, but I can't recall how that impacts the upgrade process.

upvoted 0 times

...