AZ-500 Question #252: Real Exam Question with Answer & Explanation

Question

Your organization stores Docker images for internal development using Azure Container Registry. You are required to configure the registry in such a way that a registry name is needed by developers to log into the registry and an access key is required as the password. What would be your step of action?

Options

• ACreate a system-assigned managed identity.
• BDefine a service endpoint for the registry.
• CAssign the developers to the AcrPull role-based access control (RBAC) role.
• DEnable the admin user in the registry.

Explanation

To enable login to Azure Container Registry using the registry name and an access key as a password, the admin user feature must be enabled.

Common mistakes.

• A. Creating a system-assigned managed identity is for Azure services to authenticate to ACR, not for human developers to log in directly.
• B. Defining a service endpoint (or private endpoint) configures network access to the registry, but it does not dictate the authentication method for human users.
• C. Assigning developers to the AcrPull RBAC role grants pull permissions but does not define the username/password authentication mechanism as requested.

Concept tested. Azure Container Registry admin user for basic authentication

Reference. https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication?tabs=azure-cli#admin-account

No community discussion yet for this question.