Microsoft
AZ-500 · Question #629
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…
The correct answer is B. No. The proposed solution is incorrect because assigning the Azure Kubernetes Service Cluster Admin Role to the managed identity does not grant permissions to pull images from Azure Container Registry.
Submitted by krish.m· Mar 6, 2026Secure compute, storage, and databases
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named AKS1 and an Azure container registry named AZCR1. You need to ensure that AKS1 can deploy container images stored in AZCR1. Solution: You configure AKS1 to use a user-assigned managed identity and assign the Azure Kubernetes Service Cluster Admin Role to the manage identity. Does this meet the requirement?
Options
- AYes
- BNo
How the community answered
(64 responses)- A23% (15)
- B77% (49)
Why each option
The proposed solution is incorrect because assigning the Azure Kubernetes Service Cluster Admin Role to the managed identity does not grant permissions to pull images from Azure Container Registry.
AYes
BNoCorrect
Concept tested: AKS managed identity permissions for ACR image pull
Source: https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration?tabs=azure-cli%2Ckubenet
Topics
#AKS#Azure Container Registry#managed identity#container security
Community Discussion
No community discussion yet for this question.