Exam MS-900 topic 1 question 416 discussion

First one is user-assigned System-assigned cannot be used for many apps https://learn.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=portal%2Chttp

The first one is correct using system assigned managed identity to access storage from a web application. https://learn.microsoft.com/en-us/entra/identity-platform/multi-service-web-app-access-storage

first on is System assigned Steps to Implement Managed Identities: Enable Managed Identity on App1: Go to the Azure portal. Navigate to your App Service (App1). Under the “Settings” section, select “Identity”. Turn on the “System assigned” managed identity. This will create an identity for your app in Azure AD. Assign Roles to the Managed Identity: Go to the Azure Storage account you want App1 to access. Under the “Access control (IAM)” section, add a role assignment. Assign the appropriate role (e.g., “Storage Blob Data Contributor”) to the managed identity of App1. This grants the necessary permissions to access the storage resources. Access Azure Storage from App1: In your application code, use the Azure SDKs to authenticate using the managed identity. The SDK will handle the authentication process and obtain the necessary tokens to access Azure Storage.

Second one B2C is correct: Azure Active Directory B2C provides business-to-customer identity as a service. Your customers can use their preferred social, enterprise, or local account identities to get single sign-on access to your applications and APIs. https://learn.microsoft.com/en-us/azure/active-directory-b2c/overview

second one is correct. first one not sure about it.

https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiVvZ-JmpmBAxUIhv0HHV-3BYYQFnoECA0QAw&url=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fazure%2Factive-directory-b2c%2F%23%3A~%3Atext%3DAzure%2520Active%2520Directory%2520B2C%2520(Azure%2Con%2520access%2520to%2520your%2520applications.&usg=AOvVaw2wKssjEiVwqoXPTG5bZXH6&opi=89978449