SC-900 Practice Question: Describe the concepts of security, compliance, and identity
Exhibit
{
"identity": {
"type": "UserAssigned",
"userAssignedIdentities": {
"/subscriptions/12345/resourcegroups/rg1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/id1": {}
}
}
}Refer to the exhibit. A security administrator is reviewing an Azure Resource Manager template for a virtual machine. What is the purpose of the 'identity' section shown?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It assigns a user-assigned managed identity to the VM so it can access other Azure resources securely.
The 'identity' section in this Azure Resource Manager template assigns a user-assigned managed identity to the virtual machine. The 'type' is set to 'UserAssigned' and the 'userAssignedIdentities' property references an existing managed identity by its resource ID. This allows the VM to authenticate to Azure services without storing credentials, using the specified identity. Option D is correct because it accurately describes this behavior.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It enables system-assigned managed identity for the VM.
Why it's wrong here
The 'type' is 'UserAssigned', not 'SystemAssigned'. A system-assigned managed identity would have 'type': 'SystemAssigned' and no 'userAssignedIdentities' block.
- ✗
It configures multi-factor authentication for the VM.
Why it's wrong here
The identity section does not configure multi-factor authentication; MFA is configured separately at the user or conditional access policy level.
- ✗
It creates a new managed identity named 'id1' in the resource group.
Why it's wrong here
The template references an existing managed identity by its resource ID; it does not create a new managed identity.
- ✓
It assigns a user-assigned managed identity to the VM so it can access other Azure resources securely.
Why this is correct
The identity section with 'type': 'UserAssigned' and a reference to an existing managed identity enables the VM to use that user-assigned managed identity to access Azure resources securely.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.