AZ-500 · Question #252
Your organization stores Docker images for internal development using Azure Container Registry. You are required to configure the registry in such a way that a registry name is needed by developers…
The correct answer is D. Enable the admin user in the registry. To enable login to Azure Container Registry using the registry name and an access key as a password, the admin user feature must be enabled.
Question
Options
- ACreate a system-assigned managed identity.
- BDefine a service endpoint for the registry.
- CAssign the developers to the AcrPull role-based access control (RBAC) role.
- DEnable the admin user in the registry.
How the community answered
(51 responses)- B2% (1)
- C4% (2)
- D94% (48)
Why each option
To enable login to Azure Container Registry using the registry name and an access key as a password, the admin user feature must be enabled.
Creating a system-assigned managed identity is for Azure services to authenticate to ACR, not for human developers to log in directly.
Defining a service endpoint (or private endpoint) configures network access to the registry, but it does not dictate the authentication method for human users.
Assigning developers to the AcrPull RBAC role grants pull permissions but does not define the username/password authentication mechanism as requested.
Enabling the admin user for an Azure Container Registry provides two static access keys (username and password) that can be used for authentication. The username is the registry name itself, and either of the generated keys serves as the password, fulfilling the requirement for developers to log in with the registry name and an access key.
Concept tested: Azure Container Registry admin user for basic authentication
Source: https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication?tabs=azure-cli#admin-account
Community Discussion
No community discussion yet for this question.