nerdexam
Microsoft

AZ-500 · Question #629

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is B. No. The proposed solution is incorrect because assigning the Azure Kubernetes Service Cluster Admin Role to the managed identity does not grant permissions to pull images from Azure Container Registry.

Submitted by krish.m· Mar 6, 2026Secure compute, storage, and databases

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named AKS1 and an Azure container registry named AZCR1. You need to ensure that AKS1 can deploy container images stored in AZCR1. Solution: You configure AKS1 to use a user-assigned managed identity and assign the Azure Kubernetes Service Cluster Admin Role to the manage identity. Does this meet the requirement?

Options

  • AYes
  • BNo

How the community answered

(64 responses)
  • A
    23% (15)
  • B
    77% (49)

Why each option

The proposed solution is incorrect because assigning the Azure Kubernetes Service Cluster Admin Role to the managed identity does not grant permissions to pull images from Azure Container Registry.

AYes
BNoCorrect

Concept tested: AKS managed identity permissions for ACR image pull

Source: https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration?tabs=azure-cli%2Ckubenet

Topics

#AKS#Azure Container Registry#managed identity#container security

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice