Microsoft Exam DP-420 Topic 13 Question 48 Discussion

Actual exam question for Microsoft's DP-420 exam

Question #: 48
Topic #: 13

[All DP-420 Questions]

You have an Azure Cosmos DB account named account1.

You have several apps that connect to account1 by using the account's secondary key.

You then configure the apps to authenticate by using service principals.

You need to ensure that account1 will only allow apps to connect by using an Azure AD identity.

Which account property should you modify?

AdisableKeyBasedMetadataWriteAccess ,

BdisableLocalAuth

CuserAssignedldentatxe

DallowedOrxgins

Show Suggested Answer

Suggested Answer: B

by Jamika at Sep 16, 2024, 09:56 PM

Limited Time Offer

25%

Off

Get Premium DP-420 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shoshana

3 months ago

I'm pretty sure the correct answer is not 'userAssignedldentatxe'. That sounds like a typo, not a real property.

upvoted 0 times

Annett

1 months ago

Yes, 'disableLocalAuth' makes more sense in this context.

upvoted 0 times

...

Frankie

2 months ago

I agree, 'userAssignedldentatxe' does sound like a typo.

upvoted 0 times

...

Alverta

2 months ago

I think the correct answer is 'disableLocalAuth'.

upvoted 0 times

...

Vanesa

2 months ago

D) allowedOrxgins

upvoted 0 times

...

Emeline

2 months ago

C) userAssignedldentatxe

upvoted 0 times

...

India

2 months ago

B) disableLocalAuth

upvoted 0 times

...

Lelia

3 months ago

A) disableKeyBasedMetadataWriteAccess

upvoted 0 times

...

Lillian

3 months ago

Option A sounds like a great way to disable the ability to write metadata. Perfect for those who want to keep their Cosmos DB account a secret!

upvoted 0 times

Becky

2 months ago

I don't think that option is related to restricting access to Azure AD identities.

upvoted 0 times

...

Kattie

2 months ago

D) allowedOrxgins

upvoted 0 times

...

Maile

2 months ago

Yes, using Azure AD identity for authentication is more secure.

upvoted 0 times

...

Stephaine

2 months ago

C) userAssignedldentatxe

upvoted 0 times

...

Raul

2 months ago

That sounds like a good option to restrict access to the secondary key.

upvoted 0 times

...

Dick

3 months ago

A) disableKeyBasedMetadataWriteAccess

upvoted 0 times

...

Juan

3 months ago

D is my pick. Allowing specific origins makes sense for security, but I hope the exam doesn't ask us to spell 'origins' correctly.

upvoted 0 times

...

Ronald

4 months ago

I'm not sure, but option C looks interesting. What is a 'userAssignedldentatxe'?

upvoted 0 times

Glenna

2 months ago

User1: That makes sense. Let's go with option C then.

upvoted 0 times

...

Corazon

2 months ago

User3: I'm not sure, but it sounds like it could be related to assigning identities to users.

upvoted 0 times

...

Roy

2 months ago

User2: What is userAssignedldentatxe?

upvoted 0 times

...

Candra

3 months ago

User1: I think you should modify the userAssignedldentatxe property.

upvoted 0 times

...

Percy

4 months ago

Option B is clearly the correct answer, as disabling local authentication will force the apps to use Azure AD identity for authentication.

upvoted 0 times

Claribel

3 months ago

B) disableLocalAuth

upvoted 0 times

...

Ettie

3 months ago

A) disableKeyBasedMetadataWriteAccess

upvoted 0 times

...

Ines

4 months ago

I'm not sure. Maybe we should also consider disabling local authentication to enhance security.

upvoted 0 times

...

Xenia

4 months ago

I agree with Eric. Modifying the userAssignedldentatxe property will ensure that only Azure AD identities can connect.

upvoted 0 times

...

Eric

4 months ago

I think we should modify the userAssignedldentatxe property.

upvoted 0 times

...