Managed Identities · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
An Azure App Service uses a system-assigned managed identity to access an Azure Storage account. What happens to that identity when the App Service i…
Practice question from Managed Identities (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
easy · MCQ · Q-927DAF
An Azure App Service uses a system-assigned managed identity to access an Azure Storage account. What happens to that identity when the App Service is deleted?
- A.The managed identity is automatically deleted with the App Service.Correct answer
- B.The identity is converted automatically into a user-assigned managed identity.
- C.The identity remains available until an administrator manually deletes it.
- D.The identity is transferred automatically to the next App Service deployed in the same resource group.
Solution
A system-assigned managed identity has a lifecycle tied to its Azure resource. Deleting the resource also deletes the identity's service principal in Microsoft Entra ID. A user-assigned managed identity has an independent lifecycle.
More from Managed Identities
- An Azure Function must read secrets from an Azure Key Vault without storing credentials in application settings. The Key Vault uses Azure r…
- A company deploys several App Services and virtual machines that must access the same Azure Storage account. The identity must remain avail…
- An App Service has both a system-assigned managed identity and a user-assigned managed identity attached. The application must use the user…
- A user-assigned managed identity must read blobs from a storage account. The identity's principal ID is <principal-id>, and the storage acc…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed