SC-300 Certification Practice Question #208

Question

You have an Azure subscription that contains the resources shown in the following table.

You create a Microsoft Entra user named User1.

Which identities can you add to VM1 and App1? To answer, select the appropriate options in the answer area.

NOTE: Each correct answer is worth one point.

Accepted Answer

Managed1 and Managed2 are user-assigned managed identities — standalone resources that MS Learn confirms can each be associated with more than one Azure resource, so a VM can take both → "Managed1 and Managed2 only." User1 is a Microsoft Entra user, not a managed identity, so it is never a valid "identity to add" in either dropdown; that eliminates every option containing User1 and discounts Giuseppe's VM1 variant. Azure resources that support managed identities can have a system-assigned identity *and* one or more user-assigned identities simultaneously (App Service supports `SystemAssigned,UserAssigned`); the App1 dropdown's only choice combining a system-assigned identity with an available user-assigned one is "A system-assigned managed identity and Managed2 only," which both top commenters endorse. Confidence is held at 80% because examtopics published no Suggested/Most-Voted answer and the thread is openly confused, but the MS Learn rules and the converging community answers resolve it.

More SC-300 practice questions