Microsoft Azure Administrator (legacy) — Question 66

You have an Azure subscription named Subscription1 that contains an Azure virtual network named VM1. VM1 is in a resource group named RG1.
VM1 runs services that will be used to deploy resources to RG1.
You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1.
What should you do first?

Answer options

• A. From the Azure portal, modify the Access control (IAM) settings of RG1.
• B. From the Azure portal, modify the Policies settings of RG1.
• C. From the Azure portal, modify the Access control (IAM) settings of VM1.
• D. From the Azure portal, modify the value of the Managed Service Identity option for VM1.

Correct answer: D

Explanation

The correct answer is D because enabling the Managed Service Identity for VM1 allows it to authenticate and manage resources in RG1. The other options do not directly set up the identity needed for VM1 to manage resources, as modifying IAM settings or policies without enabling the identity does not grant the necessary permissions.