SC-300 Certification Practice Question #105

Question

You have an Azure subscription that contains the following virtual machine:

•	Name: V1
•	Azure region: East US
•	System-assigned managed identity: Disabled

You create the managed identities shown in the following table.

You perform the following actions:

•	Assign Managed1 to V1.
•	Create a resource group named RG1 in the West US region.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Accepted Answer

A user-assigned managed identity is a regional resource, but MS Learn's managed-identities FAQ states it can be attached to resources in any region because its service principal is global — so assigning Managed2 (East US) and Managed3 (West US) to V1 (East US) both succeed regardless of region (Yes/Yes). Note Managed1 is already attached and the VM works, so the user-assigned attach path is valid even with the system-assigned identity disabled (user-assigned does not require system-assigned). The third statement is the trap: it says "You can assign VM1 the Owner role for RG1," but the scenario's VM is named "V1," not "VM1," and more fundamentally an Azure role is assigned to a security principal (a user, group, or managed identity), not directly to a VM resource — so the literal statement is No. The two Highly Voted answers (19 and 14 👍) agree on YYN and the cross-region behavior is confirmed by MS Learn. A vocal YYY minority (and one lab test) keeps confidence at 84 rather than higher, but the V1-vs-VM1 wording plus "roles go to identities, not VMs" make No the defensible answer for row 3.

More SC-300 practice questions