AZ-500 · Question #242
There is an Azure App Service app you are managing. This app hosts website artifacts in a general purpose v2 storage account. You are required to execute the App Service app configuration so it can…
The correct answer is D. A managed identity. To enable an Azure App Service app to authenticate programmatically to a storage account without managing credentials, create a managed identity for the App Service.
Question
Options
- Aan Azure AD Connect VM
- Ban Azure AD user
- Can Azure role-based access control (RBAC) role assignment
- DA managed identity
How the community answered
(18 responses)- A6% (1)
- B6% (1)
- D89% (16)
Why each option
To enable an Azure App Service app to authenticate programmatically to a storage account without managing credentials, create a managed identity for the App Service.
Azure AD Connect VM is used for synchronizing on-premises Active Directory with Azure AD and is not relevant for an App Service app authenticating to a storage account.
Creating an Azure AD user account and using its credentials programmatically would require managing and securing those credentials within the application, which managed identities are designed to avoid.
While an Azure RBAC role assignment is necessary to grant permissions, you first need a principal like a managed identity to assign the role to for programmatic authentication.
A managed identity provides an Azure Active Directory identity for the Azure App Service app, allowing it to authenticate to other Azure services like a storage account without needing to store or manage credentials in code.
Concept tested: Managed identities for Azure resources
Source: https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
Community Discussion
No community discussion yet for this question.