nerdexam
Microsoft

DP-100 · Question #279

You have an Azure Machine Learning workspace named workspace1. You must add a datastore that connects an Azure Blob storage container to workspace1. You must be able to configure a privilege level…

The correct answer is D. Managed identity. Managed identity is the recommended authentication method when you need to configure a privilege level, because it integrates with Azure Role-Based Access Control (RBAC). You assign the managed identity a specific RBAC role (e.g., Storage Blob Data Reader or Storage Blob Data…

Design and prepare a machine learning solution

Question

You have an Azure Machine Learning workspace named workspace1. You must add a datastore that connects an Azure Blob storage container to workspace1. You must be able to configure a privilege level. You need to configure authentication. Which authentication method should you use?

Options

  • AService principal
  • BAccount key
  • CSAS token
  • DManaged identity

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    9% (3)
  • D
    81% (26)

Explanation

Managed identity is the recommended authentication method when you need to configure a privilege level, because it integrates with Azure Role-Based Access Control (RBAC). You assign the managed identity a specific RBAC role (e.g., Storage Blob Data Reader or Storage Blob Data Contributor) on the storage container, enabling fine-grained privilege configuration. Account key (B) grants full access with no privilege granularity. SAS tokens (C) can restrict operations but are not privilege-level RBAC assignments. Service principal (A) also works with RBAC but requires credential management, making managed identity the preferred option.

Topics

#Azure ML Datastore#Managed Identity#Azure Blob Storage#Authentication

Community Discussion

No community discussion yet for this question.

Full DP-100 Practice