nerdexam
Microsoft

DP-700 · Question #18

You have a Fabric workspace named Workspace1. You plan to integrate Workspace1 with Azure DevOps. You will use a Fabric deployment pipeline named deployPipeline1 to deploy items from Workspace1 to…

The correct answer is A. service principal. To programmatically interact with Fabric APIs from an Azure DevOps pipeline for deployment automation, a service principal is the recommended authentication method. A service principal provides a secure and automated way for applications to authenticate without using user…

Implement and manage an analytics solution

Question

You have a Fabric workspace named Workspace1. You plan to integrate Workspace1 with Azure DevOps. You will use a Fabric deployment pipeline named deployPipeline1 to deploy items from Workspace1 to higher-environment workspaces as part of a foundation architecture. You will run deployPipeline1 by using an API call from an Azure DevOps pipeline. You need to configure API authentication between Azure DevOps and Fabric. Which type of authentication should you use?

Options

  • Aservice principal
  • BMicrosoft Entra username and password
  • Cmanaged private endpoint
  • Dworkspace identity

How the community answered

(24 responses)
  • A
    75% (18)
  • B
    17% (4)
  • C
    4% (1)
  • D
    4% (1)

Why each option

To programmatically interact with Fabric APIs from an Azure DevOps pipeline for deployment automation, a service principal is the recommended authentication method. A service principal provides a secure and automated way for applications to authenticate without using user credentials.

Aservice principalCorrect

A service principal is the recommended and most secure method for programmatic authentication from automated systems like Azure DevOps pipelines to Fabric APIs. It allows for unattended execution and granular permission management.

BMicrosoft Entra username and password

Using a Microsoft Entra username and password for API authentication in automated pipelines is not secure or recommended practice due to credential management challenges and security risks.

Cmanaged private endpoint

A managed private endpoint provides secure network connectivity to services over a private link, but it is not an authentication mechanism itself.

Dworkspace identity

A workspace identity is typically used within specific Azure services to authenticate to other Azure services, but for cross-service API calls from Azure DevOps to Fabric, a service principal is generally used.

Concept tested: Fabric API authentication for automated pipelines

Source: https://learn.microsoft.com/en-us/fabric/cicd/deployment-pipelines/integrate-pipelines-fabric-api

Topics

#Fabric deployment pipelines#Azure DevOps integration#API authentication#Service principal

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DP-700 Practice