Easy1 markMultiple Choice

AZ-305 · Question 18 · Domain 1.4: Design Identities and Access for Applications

You are designing an application architecture where an Azure App Service web app needs to securely access an Azure SQL Database and an Azure Storage Account.

Security policies require that no credentials, connection strings, or secrets be stored in the application code or configuration files. The identity used for access must be automatically managed by Azure and tied to the lifecycle of the App Service.

Which identity solution should you recommend?

Answer options:

A.

User-assigned Managed Identity

B.

System-assigned Managed Identity

C.

Service Principal with a client secret stored in Azure Key Vault

D.

Azure AD B2C Application Registration

How to approach this question

Match 'tied to the lifecycle of the App Service' with System-assigned. User-assigned has an independent lifecycle.

Full Answer

B.System-assigned Managed Identity✓ Correct
A System-assigned Managed Identity is tied directly to the lifecycle of the Azure resource it is enabled on. It allows the App Service to authenticate to Azure SQL and Storage using Microsoft Entra ID without storing any credentials in code. When the App Service is deleted, Azure automatically cleans up the identity.

Common mistakes

Choosing User-assigned Managed Identity. User-assigned is better when multiple resources need to share the same identity, but it violates the 'tied to the lifecycle' constraint.

Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 4

55 questions · hints · full answers · grading

More questions from this exam