Exam AZ-500 topic 3 question 57 discussion

Actual exam question from Microsoft's AZ-500

Question #: 57
Topic #: 3

You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.
You need to use the automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.
What should you create?

A. a secret in Azure Key Vault
B. a role assignment
C. an Azure Active Directory (Azure AD) user
D. an Azure Active Directory (Azure AD) group

Show Suggested Answer

Suggested Answer: B 🗳️

by Exam_Master_Me at July 19, 2020, 8:31 a.m.

Comments

Submit Cancel

Sergi0

Highly Voted 3 years, 3 months ago

The answer is correct

upvoted 26 times

...

deegadaze1

Highly Voted 2 years, 8 months ago

In Exam

upvoted 13 times

...

zellck

Most Recent 5 months, 4 weeks ago

Selected Answer: B

B is the answer. https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration The AKS to ACR integration assigns the AcrPull role to the Azure Active Directory (Azure AD) managed identity associated with the agent pool in your AKS cluster.

upvoted 5 times

...

majstor86

8 months ago

Selected Answer: B

B. a role assignment Outdated. System Managed Identity-currently

upvoted 5 times

...

Ajdlfasudfo0

9 months, 2 weeks ago

outdated questions, nowadays you get a System Managed Identity

upvoted 2 times

OrangeSG

9 months ago

You are correct. An Azure Kubernetes Service (AKS) cluster requires an identity to access Azure resources like load balancers and managed disks. This identity can be either a managed identity or a service principal. By default, when you create an AKS cluster a system-assigned managed identity is automatically created. To use a service principal, you have to create one, as AKS does not create one automatically. https://learn.microsoft.com/en-us/azure/aks/use-managed-identity

upvoted 3 times

...