Microsoft Exam SC-100 Topic 1 Question 55 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 55
Topic #: 1

You have an Azure AD tenant that syncs with an Active Directory Domain Services (AD DS) domain.

You are designing an Azure DevOps solution to deploy applications to an Azure subscription by using continuous integration and continuous deployment (CI/CD) pipelines.

You need to recommend which types of identities to use for the deployment credentials of the service connection. The solution must follow DevSecOps best practices from the Microsoft Cloud Adoption Framework for Azure.

What should you recommend?

Aan Azure AD user account that has a password stored in Azure Key Vault

Ba group managed service account (gMSA)

Can Azure AD user account that has role assignments in Azure AD Privileged Identity Management {PIM)

Da managed identity in Azure

Show Suggested Answer

Suggested Answer: D

by Colette at Sep 17, 2024, 04:03 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ettie

15 days ago

Hold up, are we choosing identities or planning a heist? This is getting more exciting than a mission impossible movie!

upvoted 0 times

Filiberto

6 days ago

A) an Azure AD user account that has a password stored in Azure Key Vault

upvoted 0 times

...

Candra

18 days ago

Ooh, option C sounds fun! Gotta love that extra layer of security. Although, I'd rather not have to manage all those pesky role assignments. Managed identity it is!

upvoted 0 times

...

Gretchen

19 days ago

PIM? Now that's some fancy stuff! But I'd rather not deal with the extra complexity. Give me that managed identity, nice and simple.

upvoted 0 times

Sage

2 days ago

I agree, managed identities are much simpler to use.

upvoted 0 times

...

Talia

29 days ago

I'm not sure, but I think a managed identity in Azure could also be a good option for deployment credentials.

upvoted 0 times

...

Royce

29 days ago

I'm not too keen on storing passwords in Key Vault. That feels a bit outdated, don't you think? Let's go with the gMSA approach, keeps things nice and tidy.

upvoted 0 times