Microsoft
AZ-204 · Question #247
You develop and deploy an Azure Logic app that calls an Azure Function app. The Azure Function app includes an OpenAPI (Swagger) definition and uses an Azure Blob storage account. All resources are se
Sign in or unlock AZ-204 to reveal the answer and full explanation for question #247. The question stem and answer options stay visible for context.
Submitted by carter_n· Mar 30, 2026Implement Azure security
Question
You develop and deploy an Azure Logic app that calls an Azure Function app. The Azure Function app includes an OpenAPI (Swagger) definition and uses an Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD). The Azure Logic app must securely access the Azure Blob storage account. Azure AD resources must remain if the Azure Logic app is deleted. You need to secure the Azure Logic app. What should you do?
Options
- ACreate a user-assigned managed identity and assign role-based access controls.
- BCreate an Azure AD custom role and assign the role to the Azure Blob storage account.
- CCreate an Azure Key Vault and issue a client certificate.
- DCreate a system-assigned managed identity and issue a client certificate.
- ECreate an Azure AD custom role and assign role-based access controls.
Unlock AZ-204 to see the answer
You've previewed enough free AZ-204 questions. Unlock AZ-204 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#managed identity#user-assigned identity#RBAC#Logic Apps