Managed Identities · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
An App Service has both a system-assigned managed identity and a user-assigned managed identity attached. The application must use the user-assigned…
Practice question from Managed Identities (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
hard · MCQ · Q-CB0728
An App Service has both a system-assigned managed identity and a user-assigned managed identity attached. The application must use the user-assigned identity to access Blob Storage. Which change explicitly selects that identity when using the Azure .NET SDK?
- A.Use
new DefaultAzureCredential()without any options, because the SDK always selects the user-assigned identity. - B.Use
new DefaultAzureCredential(new DefaultAzureCredentialOptions { ManagedIdentityClientId = userAssignedClientId })when constructing theBlobServiceClient.Correct answer - C.Pass the user-assigned identity's client ID as the storage account name when constructing the
BlobServiceClient. - D.Set the storage account's access key as the
ManagedIdentityClientIdvalue.
Solution
When multiple managed identities are available, the application should specify the user-assigned identity's client ID. ManagedIdentityClientId causes DefaultAzureCredential to request tokens for that identity rather than relying on ambiguous identity selection.
More from Managed Identities
- An Azure Function must read secrets from an Azure Key Vault without storing credentials in application settings. The Key Vault uses Azure r…
- A company deploys several App Services and virtual machines that must access the same Azure Storage account. The identity must remain avail…
- An Azure App Service uses a system-assigned managed identity to access an Azure Storage account. What happens to that identity when the App…
- A user-assigned managed identity must read blobs from a storage account. The identity's principal ID is <principal-id>, and the storage acc…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed