nerdexam
Microsoft

SC-100 · Question #334

You have an Azure subscription that contains a web app named App1. App1 uses a Microsoft Entra user account named SRV1 as a service account to authenticate to an Azure SQL database named DB1. You…

The correct answer is A. a managed identity. Azure App Service provides a highly scalable, self-patching web hosting service in Azure. App Service also provides a managed identity for your app, which is a turnkey solution for securing access to Azure SQL and other Azure services. Managed identities in App Service make…

Design security solutions for applications and data

Question

You have an Azure subscription that contains a web app named App1. App1 uses a Microsoft Entra user account named SRV1 as a service account to authenticate to an Azure SQL database named DB1. You discover that a developer accessed DB1 directly by using SRV1. You need to recommend a secure authentication method that will prevent credential misuse outside of App1. The solution must minimize administrative effort. What should you recommend?

Options

  • Aa managed identity
  • Ba group managed service account (gMSA)
  • Ca delegated managed service account (dMSA)
  • Da federated identity credential

How the community answered

(28 responses)
  • A
    82% (23)
  • B
    4% (1)
  • C
    11% (3)
  • D
    4% (1)

Explanation

Azure App Service provides a highly scalable, self-patching web hosting service in Azure. App Service also provides a managed identity for your app, which is a turnkey solution for securing access to Azure SQL and other Azure services. Managed identities in App Service make your app more secure by eliminating secrets, such as credentials in connection strings. https://learn.microsoft.com/en-us/azure/app-service/tutorial-connect-msi-sql-database

Topics

#Managed Identity#Azure Web App#Azure SQL Database#Authentication

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice