Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-500 Exam - Topic 3 Question 100 Discussion

You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.You need to use automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.What should you create?
B) a role assignment
A) a secret in Azure Key Vault
C) an Azure Active Directory (Azure AD) user
D) an Azure Active Directory (Azure AD) group

Microsoft AZ-500 Exam - Topic 3 Question 100 Discussion

Actual exam question for Microsoft's AZ-500 exam
Question #: 100
Topic #: 3
[All AZ-500 Questions]

You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.

You need to use automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.

What should you create?

Show Suggested Answer Hide Answer
Suggested Answer: B

https://docs.microsoft.com/en-us/azure/aks/kubernetes-service-principal

by Paz at Mar 08, 2026, 11:51 PM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lauran
4 days ago
C seems off. Azure AD user isn't needed for this setup.
upvoted 0 times
...
Elroy
9 days ago
Agreed! Without a role assignment, AKS can't access the registry.
upvoted 0 times
...
Glenn
15 days ago
I think B is the right choice. Role assignment is key for permissions.
upvoted 0 times
...
Marylou
20 days ago
Surprised that it’s not a secret in Key Vault!
upvoted 0 times
...
Kendra
25 days ago
I thought Azure AD user would work too, but I guess not?
upvoted 0 times
...
Alpha
2 months ago
Wait, can’t you just use a secret instead?
upvoted 0 times
...
Rosio
3 months ago
Totally agree, B is the right choice!
upvoted 0 times
...
Karma
3 months ago
You need a role assignment for AKS to access ACR.
upvoted 0 times
...
Izetta
3 months ago
Surprised this is even a question, it's pretty straightforward!
upvoted 0 times
...
Dorcas
3 months ago
AAD user or group won't work here, right?
upvoted 0 times
...
Louis
3 months ago
Wait, can’t you just use a secret instead?
upvoted 0 times
...
Shelton
3 months ago
Totally agree, B is the way to go!
upvoted 0 times
...
Antione
4 months ago
You need a role assignment for AKS to access ACR.
upvoted 0 times
...
Lashawnda
4 months ago
I feel like the secret in Azure Key Vault might not be the right choice here since it's about authentication, not just storing credentials.
upvoted 0 times
...
Lacresha
4 months ago
I’m a bit confused; could we also use Azure AD users or groups for this? It seems like there are multiple options.
upvoted 0 times
...
Annelle
4 months ago
I remember practicing a similar question where we had to set permissions for AKS, and it involved role assignments too.
upvoted 0 times
...
Titus
4 months ago
I think we need to create a role assignment, but I'm not entirely sure if that's the only step required for the AKS to access the container registry.
upvoted 0 times
...

Save Cancel