SC-100 · Question #334
You have an Azure subscription that contains a web app named App1. App1 uses a Microsoft Entra user account named SRV1 as a service account to authenticate to an Azure SQL database named DB1. You…
The correct answer is A. a managed identity. Azure App Service provides a highly scalable, self-patching web hosting service in Azure. App Service also provides a managed identity for your app, which is a turnkey solution for securing access to Azure SQL and other Azure services. Managed identities in App Service make…
Question
You have an Azure subscription that contains a web app named App1. App1 uses a Microsoft Entra user account named SRV1 as a service account to authenticate to an Azure SQL database named DB1. You discover that a developer accessed DB1 directly by using SRV1. You need to recommend a secure authentication method that will prevent credential misuse outside of App1. The solution must minimize administrative effort. What should you recommend?
Options
- Aa managed identity
- Ba group managed service account (gMSA)
- Ca delegated managed service account (dMSA)
- Da federated identity credential
How the community answered
(28 responses)- A82% (23)
- B4% (1)
- C11% (3)
- D4% (1)
Explanation
Azure App Service provides a highly scalable, self-patching web hosting service in Azure. App Service also provides a managed identity for your app, which is a turnkey solution for securing access to Azure SQL and other Azure services. Managed identities in App Service make your app more secure by eliminating secrets, such as credentials in connection strings. https://learn.microsoft.com/en-us/azure/app-service/tutorial-connect-msi-sql-database
Topics
Community Discussion
No community discussion yet for this question.