A company has an Azure VM that runs a custom application. The application needs to access Azure Key Vault to retrieve a secret. The team wants to use a managed identity, but the application is not compatible with the Azure Instance Metadata Service (IMDS) endpoint. What should you do?

Enable a system-assigned managed identity and use the Azure CLI to get a token for the application.

Use a user-assigned managed identity and configure the application to use the managed identity endpoint.

Store the Key Vault secret in the VM's environment variables.

Use a service principal with a certificate and install the certificate on the VM.

A company has an Azure App Service app that uses a user-assigned managed identity to access Azure Key Vault. The app is deployed in a staging slot and a production slot. The team wants to ensure that the staging slot cannot access production secrets. What should you do?

Use a system-assigned managed identity on the production slot and a user-assigned identity on the staging slot.

Assign the same user-assigned managed identity to both slots and grant it access to both Key Vaults.

Use a single user-assigned managed identity but restrict access using Key Vault network rules.

Create separate user-assigned managed identities for each slot and grant each access to its respective Key Vault.

A virtual machine uses a user-assigned managed identity. The VM needs to access a storage account. Which of the following is the correct way to grant the managed identity access to the storage account?

Configure the storage account's firewall to allow the VM's IP address

Set the storage account's access key in the VM's application settings

Add the managed identity as a member of the storage account's 'Readers' group

Assign the 'Storage Blob Data Reader' role to the managed identity at the storage account scope

A company has an Azure App Service app that uses a system-assigned managed identity to access Azure SQL Database. The app is currently using SQL authentication with a username and password. You need to migrate to managed identity authentication. What should you do?

Grant the managed identity the SQL DB Contributor role on the logical server.

Change the connection string to use the managed identity's client ID.

Create a user in the SQL database for the managed identity and change the connection string to use the managed identity.

Enable Azure AD authentication on the SQL server and add the managed identity as an Azure AD admin.

You need to create a managed identity that can be assigned to multiple Azure resources. Which type of managed identity should you create?

System-assigned managed identity

Microsoft Certified:Identity and Access Administrator Associate

Domain 3Objective 1

Plan and Implement Identities for Applications and Azure Workloads SC-300 Practice Questions (Page 1)

Part of the Plan and implement workload identities domain, which accounts for 20–25% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

4concepts

20–25%of the exam

Questions 1–5

1application · medium
A company has an Azure VM that runs a custom application. The application needs to access Azure Key Vault to retrieve a secret. The team wants to use a managed identity, but the application is not compatible with the Azure Instance Metadata Service (IMDS) endpoint. What should you do?
Select an answer first
2expert · medium
A company has an Azure App Service app that uses a user-assigned managed identity to access Azure Key Vault. The app is deployed in a staging slot and a production slot. The team wants to ensure that the staging slot cannot access production secrets. What should you do?
Select an answer first
3foundation · easy
A virtual machine uses a user-assigned managed identity. The VM needs to access a storage account. Which of the following is the correct way to grant the managed identity access to the storage account?
Select an answer first
4application · hard
A company has an Azure App Service app that uses a system-assigned managed identity to access Azure SQL Database. The app is currently using SQL authentication with a username and password. You need to migrate to managed identity authentication. What should you do?
Select an answer first
5foundation · easy
You need to create a managed identity that can be assigned to multiple Azure resources. Which type of managed identity should you create?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.