Skip to Content

SC-900: Associate the Same Identity to Multiple Azure Virtual Machines with User-Assigned Managed Identity

Learn how to use a user-assigned managed identity to associate the same identity with multiple Azure virtual machines, enabling secure access to other Azure resources without managing credentials or sharing secrets.

Table of Contents

Question

What should you use to associate the same identity to more than one Azure virtual machine?

A. an Azure AD user account
B. a user-assigned managed identity
C. a system-assigned managed identity
D. an Azure AD security group

Answer

B. a user-assigned managed identity

Explanation

A user-assigned managed identity is a standalone Azure resource that can be assigned to one or more Azure service instances. It allows you to associate the same identity with multiple Azure resources, including virtual machines.

Unlike system-assigned managed identities, which are tied to the lifecycle of a single Azure resource instance, user-assigned managed identities are reusable and can be assigned, removed, and reassigned to different resources as needed. This makes user-assigned managed identities a flexible option when you need to share the same identity across multiple resources, such as virtual machines.

By assigning a user-assigned managed identity to your Azure virtual machines, you can grant them the necessary permissions to access other Azure resources or services that support Azure Active Directory authentication, without the need to manage credentials or share secrets.

Microsoft Security, Compliance, and Identity Fundamentals SC-900 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Security, Compliance, and Identity Fundamentals SC-900 exam and earn Microsoft Security, Compliance, and Identity Fundamentals SC-900 certification.