Microsoft SC-100 Exam - Topic 3 Question 54 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 54
Topic #: 3

For of an Azure deployment you are designing a security architecture based on the Microsoft Cloud Security Benchmark. You need to recommend a best practice for implementing service accounts for Azure API management What should you include in the recommendation?

Adevice registrations in Azure AD

Bapplication registrations m Azure AD

CAzure service principals with certificate credentials

DAzure service principals with usernames and passwords

Emanaged identities in Azure

Show Suggested Answer

Suggested Answer: E

by Alline at Sep 17, 2024, 02:31 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mollie

10 months ago

I’m surprised managed identities are recommended over service principals!

upvoted 0 times

...

Elin

10 months ago

Application registrations are still relevant, though.

upvoted 0 times

...

Karol

10 months ago

Wait, aren't service principals with certificates more secure?

upvoted 0 times

...

Salina

11 months ago

Definitely agree with option E! So much easier.

upvoted 0 times

...

Shawana

11 months ago

I think managed identities in Azure are the way to go!

upvoted 0 times

...

Tequila

11 months ago

I’m leaning towards Azure service principals with certificate credentials since they seem more secure, but I need to double-check that.

upvoted 0 times

...

Heidy

11 months ago

I feel like application registrations were part of our practice questions, but I’m not confident they’re the right choice here.

upvoted 0 times

...

Vincent

12 months ago

I think managed identities were mentioned as a best practice for security, but I can’t recall the specifics on how they work with API management.

upvoted 0 times

...

Tasia

12 months ago

I remember we discussed service principals in class, but I’m not sure if it’s better to use certificates or just usernames and passwords.

upvoted 0 times

...

Avery

12 months ago

Application registrations in Azure AD could work, but I'm not confident that's the best practice recommended in the security benchmark. I'll need to think this through carefully.

upvoted 0 times

...

Pearline

12 months ago

Device registrations in Azure AD? That doesn't sound right for service accounts. I'll need to double-check the options and make sure I select the correct one.

upvoted 0 times

...

Wenona

12 months ago

Managed identities in Azure seem like the most secure option for service accounts, since they eliminate the need to manage credentials. I'll make sure to select that in my answer.

upvoted 0 times

...

Alesia

12 months ago

Hmm, I'm not entirely sure about this one. I'll need to review the Azure security benchmark guidelines again to make sure I understand the recommended approach for service accounts.

upvoted 0 times

...

Herminia

12 months ago

This question seems straightforward, I think the best practice for service accounts in Azure API management would be to use Azure service principals with certificate credentials.

upvoted 0 times

...

Nobuko

2 years ago

I believe Azure service principals with certificate credentials could also be a good option for implementing service accounts for Azure API management, as it adds an extra layer of security.

upvoted 0 times

...

Jamie

2 years ago

Wow, someone really has it out for Azure service accounts. Passwords? Really? That's so 2010.

upvoted 0 times

Leota

2 years ago

C) Azure service principals with certificate credentials

upvoted 0 times

...

Alva

2 years ago

Yeah, using passwords for service accounts is risky.

upvoted 0 times

...

Glen

2 years ago

E) managed identities in Azure

upvoted 0 times

...

Kanisha

2 years ago

B) application registrations m Azure AD

upvoted 0 times

...

Lindy

2 years ago

A) device registrations in Azure AD

upvoted 0 times

...

Dorcas

2 years ago

E) managed identities in Azure

upvoted 0 times

...

Roslyn

2 years ago

B) application registrations in Azure AD

upvoted 0 times

...

Veta

2 years ago

A) device registrations in Azure AD

upvoted 0 times

...

Sunshine

2 years ago

I agree with Karl. Application registrations in Azure AD provide more secure access control and management for the API management.

upvoted 0 times

...

Nicolette

2 years ago

Haha, I'm not touching those password options with a 10-foot pole. Give me certificates or give me death!

upvoted 0 times

Denny

2 years ago

Device registrations in Azure AD can also be a good practice.

upvoted 0 times

...

Alpha

2 years ago

I prefer application registrations in Azure AD for service accounts.

upvoted 0 times

...

Jennie

2 years ago

I think managed identities in Azure are also a good option.

upvoted 0 times

...

Julieta

2 years ago

I agree, certificates are the way to go for security.

upvoted 0 times

...

Curt

2 years ago

Option C looks like the best choice to me. Azure service principals with certificate credentials provide a more secure way to manage service accounts than passwords.

upvoted 0 times

Abraham

2 years ago

I think managed identities in Azure could also be a good option for implementing service accounts.

upvoted 0 times

...

Karma

2 years ago

I agree, using certificate credentials is definitely more secure than passwords.

upvoted 0 times

...

Karl

2 years ago

I think the best practice for implementing service accounts for Azure API management is application registrations in Azure AD.

upvoted 0 times

...

Kattie

2 years ago

I agree, C is the way to go. Certificates are way more secure than usernames and passwords for service accounts.

upvoted 0 times

...