MENU
You have an Azure subscription that contains a storage account named storage1 and a web app named WebApp1. WebApp1 uses a system-assigned managed identity.
You need to ensure that WebApp1 can read and write files to storage1 by using the system-assigned managed identity.
What should you configure for storage1 in the Azure portal?
Suggested Answer: B
Get Premium SC-300 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
AI
Ailene
11 months ago
Not sure about that, seems too easy!
JI
Jina
11 months ago
Wait, can the managed identity really access storage without keys?
RA
Raul
11 months ago
I thought a shared access signature would work too.
OL
Olive
12 months ago
Totally agree, IAM is the way to go!
FR
Frank
12 months ago
You need to configure the Access control (IAM) settings.
PE
Penney
1 year ago
I feel like access keys might be too broad for this scenario. It seems like we should focus on the managed identity specifically.
LO
Lorrine
1 year ago
I practiced a similar question, and I believe the system-assigned managed identity needs specific role assignments in IAM.
VE
Velda
1 year ago
I'm not entirely sure, but I remember something about shared access signatures. Could that be relevant here?
SH
Shanda
1 year ago
I think we need to set permissions for WebApp1 to access storage1, so maybe it's the Access control (IAM) settings?
DO
Doretha
1 year ago
I'm a little confused by this question. I know we need to set something up in the storage account to allow the web app to access it, but I'm not sure if it's the File share settings, a shared access signature, or something else. I'll need to think this through carefully and review my Azure security and storage concepts.
VI
Vi
1 year ago
Okay, I've got this. The key here is that we need to configure the storage account to allow the system-assigned managed identity of the web app to access it. That means we need to go to the Access control (IAM) settings of the storage account and add the managed identity as a role assignment, probably with the Storage Blob Data Contributor role. Easy peasy!
BE
Beckie
1 year ago
Hmm, I'm a bit unsure about this one. I know we need to configure something in the storage account to allow the web app to access it, but I'm not sure if it's the File share settings, the Access control (IAM) settings, or something else. I'll need to review my notes on managed identities and storage account permissions.
MA
Matilda
1 year ago
This seems straightforward. I think the answer is B - the Access control (IAM) settings, since we need to grant the system-assigned managed identity of the web app the necessary permissions to access the storage account.
EL
Elke
2 years ago
I bet it's D) data protection. We need to make sure the files in the storage account are properly secured, right? *winks* Just kidding, that's probably not the right answer.
PA
Paris
2 years ago
C) a shared access signature (SAS)
AN
An
2 years ago
B) the Access control (IAM) settings
MA
Maryln
2 years ago
A) the File share settings
JU
Judy
2 years ago
I think both options could work, but IAM settings might be more secure in this case.
CH
Charlesetta
2 years ago
Haha, definitely not C) a shared access signature (SAS). That would just give a temporary, limited-access token, not the full permissions we need. What were the exam writers thinking with that one?
DE
Derrick
2 years ago
That's a good point, Walker. A SAS could also be a valid option for granting access to WebApp1.
WA
Walker
2 years ago
But wouldn't creating a shared access signature (SAS) also work for this scenario?
JU
Judy
2 years ago
I agree with Derrick, setting up the IAM settings should allow WebApp1 to access storage1.
LA
Lashon
2 years ago
Hmm, I'm not sure. Maybe it's E) access keys? That would give WebApp1 the credentials to access the storage account, right? *scratches head*
JA
Jamika
2 years ago
You're welcome! Let me know if you need any help with the configuration.
SU
Sueann
2 years ago
Oh, I see. Thanks for clarifying. I'll make sure to configure the Access control settings instead.
CR
Crissy
2 years ago
You should configure B) the Access control (IAM) settings for storage1. That way you can assign the necessary permissions to the system-assigned managed identity of WebApp1.
AL
Alease
2 years ago
No, it's not E) access keys. That's not the best practice for granting access to storage accounts.
LE
Leota
2 years ago
The correct answer is B) the Access control (IAM) settings. We need to configure the storage account's IAM settings to grant the WebApp1 managed identity the necessary permissions to read and write files.
AR
Ariel
2 years ago
Yes, that's correct. By configuring the IAM settings, we can grant the necessary permissions to the WebApp1 managed identity.
RE
Refugia
2 years ago
I think we need to configure the Access control (IAM) settings for storage1.
DE
Derrick
2 years ago
I think we need to configure the Access control (IAM) settings for storage1.