SC-300 Certification Practice Question #134

Question

You have an Azure subscription that is linked to an Azure AD tenant named contoso.com. The subscription contains a group named Group1 and a virtual machine named VM1.

You need to meet the following requirements:

•	Enable a system-assigned managed identity for VM1.
•	Add VM1 to Group1.

How should you complete the PowerShell script? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Accepted Answer

The script first stores the VM object (`$vm = Get-AzVM -ResourceGroupName ... -Name vm1`) so it can be passed to the already-supplied `Update-AzVM ... -IdentityType SystemAssigned` line that enables the system-assigned managed identity. To add that identity to a group, you must obtain the VM's service principal object — Microsoft Learn's quickstart uses `Get-AzADServicePrincipal -displayname "vm1"`, whose `Id` is then used as `-RefObjectId` in `Add-AzureADGroupMember`. The `-displayname "vm1"` parameter in slot 2 only fits a service-principal lookup, ruling out Get-AzVM/Get-AzADGroup there. Update-AzVM and Get-AzADGroup are already present elsewhere in the script and Update-AzADServicePrincipal is unused, leaving Get-AzVM and Get-AzADServicePrincipal as the two dragged cmdlets. The Highly Voted answer (8 👍), two detailed supporting comments, and the official MS Learn quickstart all match.

More SC-300 practice questions