Exam AZ-400 topic 7 question 40 discussion

From https://azuredevopslabs.com/labs/devopsserver/azureserviceprincipal/ (see also the screenshots there) ... 4. Run "az ad sp create-for-rbac --name ServicePrincipalName" 5. Azure will generate an appID, which is the Service principal client ID used by Azure DevOps Server. It will also generate a strong password, which is the Service principal key. The final value of interest is the tenant, which is the Tenant ID... 6. Execute "az account show" 7. The id is the Subscription ID you need to create the service connection. The name is the Subscription name you need. >> I validated this approach . >> Conclusion: The given answer ABD is correct. It is a bit confusing because the fields in Azure Devops "Create service connection" have different names than in the CLI output. But there is no "client secret" and no "object id".

Correct, in task1 we can use powershell for connection, so could use Tenant ID, App ID, secret https://docs.microsoft.com/en-us/powershell/azure/authenticate-azureps?view=azps-7.3.0#sign-in-with-a-service-principal

Sorry after reviewing it should be ACD https://docs.microsoft.com/en-us/azure/active-directory/develop/app-objects-and-service-principals "When you've completed the app registration, you've a globally unique instance of the app (the application object) which lives within your home tenant or directory. You also have a globally unique ID for your app (the app or client ID). In the portal, you can then add secrets or certificates and scopes to make your app work, customize the branding of your app in the sign-in dialog, and more."