nerdexam
Microsoft

MS-900 · Question #441

Drag and Drop Question A company deploys an Azure App Service named App1. The company has the following requirements for apps in App1: - Apps must use the same identity to access Azure Storage…

The correct answer is System-assigned managed identity; Azure AD business to customer (B2C) identity. System-assigned managed identity is the correct choice for allowing apps in App1 to share the same identity to access Azure Storage, because it is tied directly to the App Service resource and automatically managed by Azure - when multiple apps run under the same App Service…

Submitted by paula_co· Mar 5, 2026Manage Identity and Access - Implement Azure AD identity solutions including managed identities and external identity providers (AZ-104 / AZ-900 Identity Domain)

Question

Drag and Drop Question A company deploys an Azure App Service named App1. The company has the following requirements for apps in App1: - Apps must use the same identity to access Azure Storage. - Users outside the company must be able to access the apps by using their social media identity. You need to identify the Azure Active Directory (Azure AD) identify solutions. What should you use? To answer, drag the appropriate identity solution to the correct requirement. Each identity solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

MS-900 question #441 exhibit

Answer Area

Drag items

User-assigned managed identitySystem-assigned managed identityAzure AD business to business (B2B) identityAzure AD business to customer (B2C) identity

Correct arrangement

  • System-assigned managed identity
  • Azure AD business to customer (B2C) identity

Explanation

System-assigned managed identity is the correct choice for allowing apps in App1 to share the same identity to access Azure Storage, because it is tied directly to the App Service resource and automatically managed by Azure - when multiple apps run under the same App Service, they share that single system-assigned identity. Azure AD B2C (Business to Customer) is correct for allowing external users to authenticate using social media identities (e.g., Google, Facebook, Microsoft accounts), as it is specifically designed for customer-facing authentication scenarios with external identity providers.

Topics

#Managed Identity#Azure AD B2C#App Service Authentication#Azure Active Directory

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MS-900 Practice