Home » Microsoft » AZ-303 » You create the Azure resources shown in the following table.
You create the Azure resources shown in the following table.
You attempt to add a role assignment to a resource group as shown in the following exhibit.
What should you do to ensure that you can assign VM2 the Reader role for the resource group?
A. Configure just in time (JIT) VM access on VM2.
B. Configure Access control (IAM) on VM2.
C. Assign a managed identity to VM2.
D. Modify the Reader role at the subscription level.
Correct Answer: B
Explanation/Reference:
Explanation:
After you’ve configured an Azure resource with a managed identity, you can give the managed identity access to another resource, just like any security principal.
Use Azure RBAC to assign a managed identity access to another resource After you’ve enabled managed identity on an Azure resource, such as an Azure VM or Azure virtual machine scale set:
1. Sign in to the Azure portal using an account associated with the Azure subscription under which you have configured the managed identity.
2. Navigate to the desired resource on which you want to modify access control. In this example, we are giving an Azure virtual machine access to a storage account, so we navigate to the storage account.
3. Select the Access control (IAM) page of the resource, and select + Add role assignment. Then specify the Role, Assign access to, and specify the corresponding Subscription. Under the search criteria area, you should see the resource.
Select the resource, and select Save.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/howto-assign-access-portal
How To Pass Azure AZ-305 Exam?
Microsoft Azure AZ-305 PDF dumps.
High quality AZ-305 PDF and software. VALID exam to help you pass.
|
 |
“C” is the correct answer.
C is the correct Answer.
B is correct
C. Assign a managed identity to VM2.