Managed Identities · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
A company deploys several App Services and virtual machines that must access the same Azure Storage account. The identity must remain available if on…
Practice question from Managed Identities (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
medium · MCQ · Q-147616
A company deploys several App Services and virtual machines that must access the same Azure Storage account. The identity must remain available if one of the application resources is deleted and recreated. Which approach best meets these requirements?
- A.Enable a separate system-assigned managed identity on every resource and recreate role assignments after each deployment.
- B.Create one user-assigned managed identity, assign it the required Storage Blob Data Contributor role, and attach it to each resource.Correct answer
- C.Use the Azure subscription owner's credentials in each application.
- D.Create a system-assigned managed identity on a resource group and attach the resource group's identity to the applications.
Solution
A user-assigned managed identity is an independent Azure resource. It can be attached to multiple supported resources and survives deletion of those resources, so its role assignments do not need to be recreated for every application redeployment.
More from Managed Identities
- An Azure Function must read secrets from an Azure Key Vault without storing credentials in application settings. The Key Vault uses Azure r…
- An App Service has both a system-assigned managed identity and a user-assigned managed identity attached. The application must use the user…
- An Azure App Service uses a system-assigned managed identity to access an Azure Storage account. What happens to that identity when the App…
- A user-assigned managed identity must read blobs from a storage account. The identity's principal ID is <principal-id>, and the storage acc…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed