# AZ-303 — Question 604

**Type:** multiple_choice
**Topics:** topic_1

## Question

You have an Azure virtual machine named VM1 and an Azure Active Directory (Azure AD) tenant named adatum.com.
VM1 has the following settings:
✑ IP address: 10.10.0.10
✑ System-assigned managed identity: On
You need to create a script that will run from within VM1 to retrieve the authentication token of VM1.
Which address should you use in the script?

## Correct Answer

_See scenario._

## Explanation

Your code that's running on the VM can request a token from the Azure Instance Metadata Service identity endpoint, accessible only from within the VM: http://169.254.169.254/metadata/identity/oauth2/token
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

**Reference:** examtopics_answer_description

---
Source: https://hiexam.net/q/microsoft/AZ-303/604  
Practice (tracked): https://hiexam.net/study/AZ-303/practice