SC-300 Certification Practice Question #61

Question

You have an Azure subscription named Sub1 that contains a virtual machine named VM1.

You need to enable Microsoft Entra login for VM1 and configure VM1 to access the resources in Sub1.

Which type of identity should you assign to VM1?

Accepted Answer

The task has two parts — enable Microsoft Entra login for VM1 and let VM1 access resources in Sub1. MS Learn explicitly requires a **system-assigned managed identity** to be enabled on the VM before the Microsoft Entra sign-in extension can be installed, and a SAMI (tied to the VM's lifecycle) is the standard way for a VM to authenticate to other Azure resources without embedded credentials. A user-assigned identity (B) would also work for resource access but is a standalone object requiring extra creation/assignment and is not the identity tied to enabling Entra login, so SAMI is the better single answer. Suggested Answer, the unanimous Most Voted (15), and the top comment (14 👍) all converge on D, with no meaningful dissent.

More SC-300 practice questions