Microsoft Exam SC-100 Topic 1 Question 55 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 55
Topic #: 1

You have an Azure AD tenant that syncs with an Active Directory Domain Services (AD DS) domain.

You are designing an Azure DevOps solution to deploy applications to an Azure subscription by using continuous integration and continuous deployment (CI/CD) pipelines.

You need to recommend which types of identities to use for the deployment credentials of the service connection. The solution must follow DevSecOps best practices from the Microsoft Cloud Adoption Framework for Azure.

What should you recommend?

Aan Azure AD user account that has a password stored in Azure Key Vault

Ba group managed service account (gMSA)

Can Azure AD user account that has role assignments in Azure AD Privileged Identity Management {PIM)

Da managed identity in Azure

Show Suggested Answer

Suggested Answer: D

by Colette at Sep 17, 2024, 04:03 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ettie

3 months ago

Hold up, are we choosing identities or planning a heist? This is getting more exciting than a mission impossible movie!

upvoted 0 times

Quentin

2 months ago

D) a managed identity in Azure

upvoted 0 times

...

Portia

2 months ago

C) an Azure AD user account that has role assignments in Azure AD Privileged Identity Management {PIM)

upvoted 0 times

...

Lavera

2 months ago

B) a group managed service account (gMSA)

upvoted 0 times

...

Filiberto

3 months ago

A) an Azure AD user account that has a password stored in Azure Key Vault

upvoted 0 times

...

Candra

3 months ago

Ooh, option C sounds fun! Gotta love that extra layer of security. Although, I'd rather not have to manage all those pesky role assignments. Managed identity it is!

upvoted 0 times

...

Gretchen

3 months ago

PIM? Now that's some fancy stuff! But I'd rather not deal with the extra complexity. Give me that managed identity, nice and simple.

upvoted 0 times

Mattie

3 months ago

Managed identities are definitely the easier option to work with.

upvoted 0 times

...

Merri

3 months ago

Yeah, I prefer to keep things simple too. Managed identities are the way to go.

upvoted 0 times

...

Sage

3 months ago

I agree, managed identities are much simpler to use.

upvoted 0 times

...

Talia

4 months ago

I'm not sure, but I think a managed identity in Azure could also be a good option for deployment credentials.

upvoted 0 times

...

Royce

4 months ago

I'm not too keen on storing passwords in Key Vault. That feels a bit outdated, don't you think? Let's go with the gMSA approach, keeps things nice and tidy.

upvoted 0 times

Reena

2 months ago

I'm not too keen on storing passwords in Key Vault. That feels a bit outdated, don't you think? Let's go with the gMSA approach, keeps things nice and tidy.

upvoted 0 times

...