C. Assign the Website Contributor role to the developers. To allow the developers of App1 to use their Azure AD credentials to deploy content to App1 using Web Deploy, you should assign the Website Contributor role to the developers. This role provides the necessary permissions for developers to deploy content to the web app, but does not grant them excessive permissions that could be used to make unwanted changes. Option A is not recommended as it would grant excessive permissions to the developers, which could be used to make unwanted changes. Option B and D are not relevant to the scenario as the question is specifically asking for how to use Azure AD credentials for Web Deploy, not FTPS. Option C is a potential solution, but the Website Contributor role provides a more targeted and appropriate level of permissions for the scenario.

B is wrong because: "To secure app deployment from a local computer, Azure App Service supports two types of credentials for local Git deployment and FTP/S deployment. These credentials are not the same as your Azure subscription credentials." https://learn.microsoft.com/en-us/azure/app-service/deploy-configure-credentials?tabs=cli Correct is C. https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#website-contributor Microsoft.Resources/deployments/* - Create and manage a deployment

Passed AZ-104 today 03/07/24 879%. 99% of Examtopics questions in my test with exact same wording. This question was on the test, I answered C. Very Thanks to Examtopics.

I dont think it is C, as the role says: { "assignableScopes": [ "/" ], "description": "Lets you manage websites (not web plans), but not access to them.", "id": "/providers/Microsoft.Authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772", "name": "de139f84-1756-47ae-9be6-808fbbe84772", part of question is to ensure devs can use creds, so I think this is related to that. also dont see in JSON the append or modify action.

I beleve B is correct. https://learn.microsoft.com/en-us/azure/app-service/deploy-ftp?tabs=portal

C is correct

The correct answer is: C. Assign the Website Contributor role to the developers. Explanation: Assigning the Website Contributor role to the developers would grant them the necessary permissions to deploy content to the Azure App Services web app (App1) without giving them excessive privileges. This role provides the necessary permissions for managing the website, including deployment, without granting ownership or administrative rights, thus adhering to the principle of least privilege.

100% C is correct

https://learn.microsoft.com/en-us/azure/app-service/deploy-configure-credentials?tabs=cli from what I see you need to be a contributor anyway for app-level (FTPS) and question is saying least possible access, so contributor anyway, this is how I understand

Selected Answer: C The solution must use the principle of least privilege. Website Contributor role with the exact permission: Microsoft.Resources/deployments/* => Create and manage a deployment

This question was on my exam today on 11/14/2023.

I got this question today in my exam.

I passed with these questions and many friends passed too, all questions appeared in the real exam a great study resource, contact me on [email protected]

Correct is C

C. Assign the Website Contributor role to the developers.

Assign the Website Contributor role to the developers.

Got this question on 09/09/23