Microsoft Certified Azure Developer Associate · Free Practice Question Medium
Question 15
Your company has several applications running on Azure App Services - App1, App2, App3 and App4. Each application is configured to use a system-managed identity to access resources. Your applications all store their secrets in a KeyVault named KV1. You are finding it difficult to manage the permissions for all these applications, and would like to move to a single managed identity for all applications instead of each application having their own. What action do you take to implement that?
- A Change the applications to the same system-managed identity
- B Change the applications to the same user-managed identity
- C Create one user in Azure Active Directory for all applications, and have the applications use that
- D Create one user in Azure Active Directory for each application, and have the applications use that
Reveal correct answer
Correct answer: B
Explanation
Managed identities eliminate the need for developers to manage credentials. Managed identities provide an identity for applications to use when connecting to resources that support Azure Active Directory (Azure AD) authentication. Applications may use the managed identity to obtain Azure AD tokens. For example, an application may use a managed identity to access resources like Azure Key Vault where developers can store credentials in a secure manner or to access storage accounts. You cannot configure multiple applications to use the same system-assigned identity. You must use a user-assigned identity for this purpose. Refer to Microsoft Doc: https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overviewDiscussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
