Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam AZ-104 topic 2 question 64 discussion

Actual exam question from Microsoft's AZ-104
Question #: 64
Topic #: 2
[All AZ-104 Questions]

You have an Azure App Services web app named App1.

You plan to deploy App1 by using Web Deploy.

You need to ensure that the developers of App1 can use their Azure AD credentials to deploy content to App1. The solution must use the principle of least privilege.

What should you do?

  • A. Assign the Owner role to the developers
  • B. Configure app-level credentials for FTPS
  • C. Assign the Website Contributor role to the developers
  • D. Configure user-level credentials for FTPS
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Mazinger
Highly Voted 9 months, 3 weeks ago
Selected Answer: C
C. Assign the Website Contributor role to the developers. To allow the developers of App1 to use their Azure AD credentials to deploy content to App1 using Web Deploy, you should assign the Website Contributor role to the developers. This role provides the necessary permissions for developers to deploy content to the web app, but does not grant them excessive permissions that could be used to make unwanted changes. Option A is not recommended as it would grant excessive permissions to the developers, which could be used to make unwanted changes. Option B and D are not relevant to the scenario as the question is specifically asking for how to use Azure AD credentials for Web Deploy, not FTPS. Option C is a potential solution, but the Website Contributor role provides a more targeted and appropriate level of permissions for the scenario.
upvoted 33 times
...
Muffay
Highly Voted 11 months, 1 week ago
Selected Answer: C
B is wrong because: "To secure app deployment from a local computer, Azure App Service supports two types of credentials for local Git deployment and FTP/S deployment. These credentials are not the same as your Azure subscription credentials." https://learn.microsoft.com/en-us/azure/app-service/deploy-configure-credentials?tabs=cli Correct is C. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#website-contributor Microsoft.Resources/deployments/* - Create and manage a deployment
upvoted 28 times
...
Ahkhan
Most Recent 3 weeks, 4 days ago
This question was on my exam today on 11/14/2023.
upvoted 3 times
...
Ahkhan
3 weeks, 4 days ago
I got this question today in my exam.
upvoted 2 times
...
mattpaul
1 month, 2 weeks ago
I passed with these questions and many friends passed too, all questions appeared in the real exam a great study resource, contact me on [email protected]
upvoted 1 times
KelvinAzure
1 month, 1 week ago
dkeidei ehaece lahei
upvoted 1 times
...
...
SOz92
2 months, 3 weeks ago
Selected Answer: C
Correct is C
upvoted 1 times
...
iamchoy
2 months, 3 weeks ago
Selected Answer: C
C. Assign the Website Contributor role to the developers.
upvoted 1 times
...
mandogrogus
2 months, 3 weeks ago
Selected Answer: C
Assign the Website Contributor role to the developers.
upvoted 1 times
...
AntaninaD
3 months ago
Got this question on 09/09/23
upvoted 3 times
JoaoPrates
1 month, 4 weeks ago
the correct answer was B?
upvoted 1 times
...
...
CarlosMarin
3 months, 1 week ago
This question was in my exam on 31/08/2023.
upvoted 5 times
...
sssishod
3 months, 2 weeks ago
can someone please tell me which one is the correct option?
upvoted 1 times
...
basanta123
3 months, 3 weeks ago
Selected Answer: C
The principle of least privilege states that users should only be granted the permissions that they need to do their job. In this case, the developers only need to be able to deploy content to App1. Therefore, assigning them the Website Contributor role is the most secure option. Configuring app-level credentials for FTPS would grant the developers more privileges than they need. They would be able to access App1's FTPS endpoint, which would allow them to upload and download files to and from App1. This is not necessary for deploying content, and it would increase the risk of a security breach. Therefore, the correct answer is to assign the Website Contributor role to the developers. This will allow them to deploy content to App1 without granting them any unnecessary privileges.
upvoted 2 times
...
CLOUD_PLUS
6 months ago
Selected Answer: C
THIS IS RIGHT ANSWER
upvoted 3 times
...
Driede
8 months, 1 week ago
Selected Answer: C
Although FTP credentials can be used for web deploy, B does not use Azure AD credentials as required by the premise.
upvoted 3 times
...
UmbongoDrink
10 months ago
Selected Answer: C
https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#website-contributor
upvoted 4 times
...
iltera
10 months, 1 week ago
Asked ChatGPT, and repeated the question providing the answers in the question. It is sure that SFTP will ve enough :) Here are the answers I got from the new gen chatbot: - No, giving users the "Website Contributor" role in Azure will not provide enough permissions to make deployments using Web Deploy. To make deployments using Web Deploy, users need to have the "Web Deployment Manager" role or have permissions to access the Web Deploy publishing endpoint. - Yes, configuring app-level credentials for SFTP in Azure Web App Services can be enough to allow deployment of web applications via SFTP. In Azure, you can create a deployment user and configure its credentials in the "Deployment credentials" section of your web app. Once you have done that, you can use those credentials to connect to your web app via SFTP and deploy your application. Just make sure that the SFTP client you are using is configured to use the correct hostname, username, and password. Does that mean, the provided answer is correct? :)
upvoted 3 times
Dat_doge
9 months, 1 week ago
chatgpt is good for texting your gf but nothing else.
upvoted 11 times
satviolet
8 months, 2 weeks ago
amen to that brother
upvoted 3 times
...
...
iltera
10 months, 1 week ago
Then I copy/paste the whole question with the answers and the answer is: The correct answer is C: Assign the Website Contributor role to the developers. By assigning the Website Contributor role to the developers, you can ensure that they have the appropriate permissions to deploy content to the web app using Web Deploy. The Website Contributor role provides users with the ability to deploy content and manage files for the web app, which is sufficient for deploying content using Web Deploy. Configuring user-level credentials for FTPS (Option D) would not be appropriate in this scenario, as you want to use Web Deploy, not FTPS. Assigning the Owner role (Option A) would provide the developers with more permissions than they need, and is not the principle of least privilege. Configuring app-level credentials for FTPS (Option B) would not be appropriate in this scenario, as you want to use Web Deploy, not FTPS. No further comments!..
upvoted 6 times
insanewriters
9 months, 3 weeks ago
I ran the exam dump for AZ-220 in ChatGPT, and it would have spectacularly failed. Do not trust it.
upvoted 5 times
mythjava
9 months, 1 week ago
You guys are doing good.
upvoted 1 times
...
...
...
madao322
9 months ago
Please do not trust chatGPT completely. It will always provide wrong answers that is seemingly right due to the data it was fed. It is an execllent tool but you have to do the debugging
upvoted 3 times
...
...
zellck
10 months, 2 weeks ago
C is the answer. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#website-contributor Manage websites, but not web plans. Does not allow you to assign roles in Azure RBAC.
upvoted 2 times
zellck
10 months, 2 weeks ago
The Website Contributor role is the least privileged role that allows developers to deploy content to an Azure App Service web app. This role gives the users the necessary permissions to deploy content to the app, but does not give them permissions to perform other management tasks such as modifying the app's configuration or scaling it up or down. Therefore, it is the best option to use the principle of least privilege. You should Assign the Website Contributor role to the developers and they will be able to use their Azure AD credentials to deploy content to App1 using Web Deploy.
upvoted 6 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...