Exam SC-300 topic 2 question 36 discussion

Actual exam question from Microsoft's SC-300

Question #: 36
Topic #: 2

You have an Azure subscription that contains an Azure SQL database named db1.

You deploy an Azure App Service web app named App1 that provides product information to users that connect to App1 anonymously.

You need to provide App1 with access to db1. The solution must meet the following requirements:

• Credentials must only be available to App1.
• Administrative effort must be minimized.

Which type of credentials should you use?

A. a system-assigned managed identity
B. an Azure Active Directory (Azure AD) user account
C. a SQL Server account
D. a user-assigned managed identity

Show Suggested Answer

Suggested Answer: A 🗳️

by Halwagy at Jan. 19, 2023, 5:40 p.m.

Comments

Submit Cancel

mali1969

Highly Voted 1 year, 5 months ago

To provide App1 with access to db1 while minimizing administrative effort and ensuring that credentials are only available to App1, you should use a system-assigned managed identity. A system-assigned managed identity is enabled directly on an Azure service instance. When the identity is enabled, Azure creates an identity for the instance in the Azure AD tenant that’s trusted by the subscription of the instance This way, you don’t need to create or manage any secrets or credentials for your application. The identity is automatically managed by Azure and enables you to authenticate to any service that supports Azure AD authentication without having any credentials in your code

upvoted 7 times

...

emartiy

Most Recent 8 months, 2 weeks ago

Selected Answer: A

A system-assigned managed identity

upvoted 1 times

...

haazybanj

1 year, 1 month ago

Selected Answer: A

The best answer is A. a system-assigned managed identity. A system-assigned managed identity is a type of managed identity that is automatically created and assigned to an Azure resource when it is created. System-assigned managed identities are easy to use and manage, and they can be used to access resources in Azure, including Azure SQL databases. D. a user-assigned managed identity: A user-assigned managed identity is a type of managed identity that is created and managed by the user. User-assigned managed identities can be used to access resources in Azure, but they are more complex to use and manage than system-assigned managed identities.

upvoted 1 times

...