You are developing an app that will read activity logs for an Azure subscription by using Azure Functions. You need to recommend an authentication solution for Azure Functions. The solution must…

The correct answer is B. system-assigned managed identities. System-assigned: Some Azure services allow you to enable a managed identity directly on a service instance. When you enable a system-assigned managed identity, an identity is created in Azure AD that's tied to the lifecycle of that service instance. When the resource is…

Submitted by ashley.k· Mar 6, 2026Design identity, governance, and monitoring solutions

Question

You are developing an app that will read activity logs for an Azure subscription by using Azure Functions. You need to recommend an authentication solution for Azure Functions. The solution must minimize administrative effort. What should you include in the recommendation?

Options

Aan enterprise application in Azure AD
Bsystem-assigned managed identities
Cshared access signatures (SAS)
Dapplication registration in Azure AD

How the community answered

(33 responses)

A
12% (4)
B
79% (26)
C
6% (2)
D
3% (1)

Explanation

System-assigned: Some Azure services allow you to enable a managed identity directly on a service instance. When you enable a system-assigned managed identity, an identity is created in Azure AD that's tied to the lifecycle of that service instance. When the resource is deleted, Azure automatically deletes the identity. By design, only that Azure resource can use that identity to request tokens from Azure AD. https://learn.microsoft.com/en-us/training/modules/design-authentication-authorization- solutions/9-one-design-managed-identities

Topics

#managed identities#Azure Functions#authentication#least privilege

Community Discussion

No community discussion yet for this question.

Full AZ-305 Practice