C. Assign the Website Contributor role to the developers. To allow the developers of App1 to use their Azure AD credentials to deploy content to App1 using Web Deploy, you should assign the Website Contributor role to the developers. This role provides the necessary permissions for developers to deploy content to the web app, but does not grant them excessive permissions that could be used to make unwanted changes. Option A is not recommended as it would grant excessive permissions to the developers, which could be used to make unwanted changes. Option B and D are not relevant to the scenario as the question is specifically asking for how to use Azure AD credentials for Web Deploy, not FTPS. Option C is a potential solution, but the Website Contributor role provides a more targeted and appropriate level of permissions for the scenario.

B is wrong because: "To secure app deployment from a local computer, Azure App Service supports two types of credentials for local Git deployment and FTP/S deployment. These credentials are not the same as your Azure subscription credentials." https://learn.microsoft.com/en-us/azure/app-service/deploy-configure-credentials?tabs=cli Correct is C. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#website-contributor Microsoft.Resources/deployments/* - Create and manage a deployment

This question was on my exam today on 11/14/2023.

I got this question today in my exam.

I passed with these questions and many friends passed too, all questions appeared in the real exam a great study resource, contact me on [email protected]

Correct is C

C. Assign the Website Contributor role to the developers.

Assign the Website Contributor role to the developers.

Got this question on 09/09/23

This question was in my exam on 31/08/2023.

can someone please tell me which one is the correct option?

The principle of least privilege states that users should only be granted the permissions that they need to do their job. In this case, the developers only need to be able to deploy content to App1. Therefore, assigning them the Website Contributor role is the most secure option. Configuring app-level credentials for FTPS would grant the developers more privileges than they need. They would be able to access App1's FTPS endpoint, which would allow them to upload and download files to and from App1. This is not necessary for deploying content, and it would increase the risk of a security breach. Therefore, the correct answer is to assign the Website Contributor role to the developers. This will allow them to deploy content to App1 without granting them any unnecessary privileges.

THIS IS RIGHT ANSWER

Although FTP credentials can be used for web deploy, B does not use Azure AD credentials as required by the premise.

https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#website-contributor

Asked ChatGPT, and repeated the question providing the answers in the question. It is sure that SFTP will ve enough :) Here are the answers I got from the new gen chatbot: - No, giving users the "Website Contributor" role in Azure will not provide enough permissions to make deployments using Web Deploy. To make deployments using Web Deploy, users need to have the "Web Deployment Manager" role or have permissions to access the Web Deploy publishing endpoint. - Yes, configuring app-level credentials for SFTP in Azure Web App Services can be enough to allow deployment of web applications via SFTP. In Azure, you can create a deployment user and configure its credentials in the "Deployment credentials" section of your web app. Once you have done that, you can use those credentials to connect to your web app via SFTP and deploy your application. Just make sure that the SFTP client you are using is configured to use the correct hostname, username, and password. Does that mean, the provided answer is correct? :)

C is the answer. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#website-contributor Manage websites, but not web plans. Does not allow you to assign roles in Azure RBAC.