StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Hybrid server management · Hybrid server management | Manage Windows Server instances and workloads by using Azure services in a hybrid environment

Practice question 476 of 506 · hard

A Windows Arc Hybrid Runbook Worker can access local files under its configured Windows execution identity. An Automation account system-assigned managed identity is enabled. The runbook uses the documented managed-identity Azure login and is denied access to a storage resource, although the Arc machine identity has a role there. What should you check?

Choose the single best answer.

  1. A.Recreate the same job schedule and assume that selects the Arc identity instead of the enabled Automation account identity
  2. B.The storage role on the Arc identity only, because an enabled Automation identity never changes the selected Azure identity
  3. C.The Automation account system-assigned identity's Azure permissions, because that enabled identity takes precedence in this documented authentication path
  4. D.The local execution account's NTFS permissions alone, because they also authorize Azure resource operations
Show the answer and explanation

✓ Correct answer

  • The Automation account system-assigned identity's Azure permissions, because that enabled identity takes precedence in this documented authentication path

The enabled Automation account system-assigned identity takes precedence over the Arc worker identity in the stated documented managed-identity path and needs appropriate Azure permissions. Local NTFS rights govern local files, not Azure resources. The Arc role alone is insufficient for the selected principal, and schedule recreation does not select a different identity.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.