SC-100 · Question #171
You have an Azure AD tenant that syncs with an Active Directory Domain Services (AD DS) domain. You are designing an Azure DevOps solution to deploy applications to an Azure subscription by using cont
Sign in or unlock SC-100 to reveal the answer and full explanation for question #171. The question stem and answer options stay visible for context.
Question
You have an Azure AD tenant that syncs with an Active Directory Domain Services (AD DS) domain. You are designing an Azure DevOps solution to deploy applications to an Azure subscription by using continuous integration and continuous deployment (CI/CD) pipelines. You need to recommend which types of identities to use for the deployment credentials of the service connection. The solution must follow DevSecOps best practices from the Microsoft Cloud Adoption Framework for Azure. What should you recommend?
Options
- Aa managed identity in Azure
- Ban Azure AD user account that has role assignments in Azure AD Privileged Identity Management
- Ca group managed service account (gMSA)
- Dan Azure AD user account that has a password stored in Azure Key Vault
Unlock SC-100 to see the answer
You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.