You have an Azure subscription that contains an Azure SQL database named db1.
You deploy an Azure App Service web app named App1 that provide product information to users that connect to App1 anonymously.
You need to provide App1 with Access to db1. The solution must meet the following requirements:
* Credentials must only be available to App1.
* Administrative effort must be minimized.
Which type of credentials should you use?
Suggested Answer: B
Get Premium SC-300 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
39 comments · newest first
SO
Sol
11 months ago
I agree, managed identities simplify credential management a lot!
DA
Dana
11 months ago
Surprised that people still consider Azure AD user accounts for this!
ER
Eric
12 months ago
Definitely not a SQL Server account, that's too much hassle.
LA
Lajuana
12 months ago
I think a user-assigned managed identity is better for flexibility.
AV
Avery
1 year ago
A system-assigned managed identity is the way to go!
EA
Earlean
1 year ago
I’m leaning towards option D, but I’m a bit confused about the differences between system-assigned and user-assigned identities.
TU
Tu
1 year ago
I practiced a similar question, and I feel like using a SQL Server account would require more management, which we want to avoid.
RO
Ronald
1 year ago
I'm not entirely sure, but I remember something about user-assigned managed identities being more flexible. Would that be better here?
AR
Arthur
1 year ago
I think a system-assigned managed identity could be the right choice since it automatically handles the credentials for App1.
CH
Chandra
1 year ago
I'm not sure about this one. The question mentions SQL Server, so I'm wondering if a SQL Server account might be the right choice here. But the requirement to minimize administrative effort makes me think a managed identity is the way to go.
JE
Jesusa
1 year ago
Okay, I've got this. The solution is to use a system-assigned managed identity for the App1 web app. That way, the credentials are automatically managed by Azure and only accessible to that specific app, which meets the requirements.
CA
Casie
1 year ago
Hmm, I'm a bit confused about the different identity options here. I'll need to review the details of user-assigned vs. system-assigned managed identities to make sure I understand the differences and which one best fits the requirements.
PA
Patti
1 year ago
This looks like a straightforward question about Azure security and identity management. I think the key is to minimize administrative effort while ensuring the credentials are only available to the App1 web app.
PE
Peggie
1 year ago
Hmm, I'm not entirely sure about this one. I'll need to think it through carefully and review my notes on EGIT and its relationship to other types of governance.
NO
Noelia
1 year ago
This question seems straightforward, but I want to make sure I understand the conditions correctly before selecting an answer.
CH
Chauncey
1 year ago
I'm a bit unsure about this one. The options seem pretty similar, so I'll need to re-read the question and think through the differences between them.
ZE
Zena
1 year ago
Okay, I'm pretty sure the answer is A. The instance and scaling group need to be in the same region, but not necessarily the same zone.
TY
Tyisha
1 year ago
I heard the Azure team is working on a new credential type called 'the-one-that-actually-works-the-first-time'. Can't wait for that one to come out!
JO
Jolene
1 year ago
Aha, a system-assigned managed identity! Now we're talking. Minimal setup and it's all tied to the app. Easy peasy!
KR
Kristian
1 year ago
A SQL Server account? No way, that's way too much work. I'm not about to start creating database logins and permissions. Pass!
TR
Truman
1 year ago
A SQL Server account? No way, that's way too much work. I'm not about to start creating database logins and permissions. Pass!
NO
Noelia
1 year ago
D) a system-assigned managed identity
WI
Winifred
1 year ago
A) a user-assigned managed identity
CE
Cecilia
2 years ago
I'm not sure about that. Wouldn't using an Azure AD user account also meet the requirements?
LE
Leanora
2 years ago
I agree with Jina. Using a user-assigned managed identity will ensure that only App1 has access to db1.
SH
Shoshana
2 years ago
An Azure AD user account? Really? That seems like overkill for this scenario. I'd rather not deal with the hassle of managing user accounts.
CA
Carma
1 year ago
D) a system-assigned managed identity
BR
Brinda
1 year ago
A) a user-assigned managed identity
JO
Joanna
1 year ago
D) a system-assigned managed identity
ER
Erinn
1 year ago
A) a user-assigned managed identity
JI
Jina
2 years ago
I think we should use a user-assigned managed identity for App1.
BI
Billy
2 years ago
I'm not sure about that, I think using an Azure AD user account might be a better option for security reasons.
TA
Taryn
2 years ago
Hmm, a user-assigned managed identity sounds like the way to go. It's specific to App1 and minimizes administrative effort. Couldn't be simpler!
WI
Willard
1 year ago
No, a system-assigned managed identity is not the best choice in this case. It's better to use a user-assigned managed identity.
MA
Marva
1 year ago
D) a system-assigned managed identity
RU
Ruthann
1 year ago
That's correct! A user-assigned managed identity is the best option for this scenario.
JA
Jacob
2 years ago
A) a user-assigned managed identity
JA
Janna
2 years ago
I agree with Skye, using a user-assigned managed identity will ensure that only App1 has access to db1.
SK
Skye
2 years ago
I think we should use a user-assigned managed identity for App1.