Microsoft Exam AZ-500 Topic 1 Question 56 Discussion

Actual exam question for Microsoft's AZ-500 exam

Question #: 56
Topic #: 1

You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.

You need to use the automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.

What should you create?

Aan Azure AD user

Ba secret in Azure Key Vault

Can Azure AD group

Da role assignment

Show Suggested Answer

Suggested Answer: D

by Tarra at Mar 19, 2024, 02:06 AM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leah

1 years ago

I'm leaning towards creating a secret in Azure Key Vault. That way we can securely store the authentication information for the AKS cluster.

upvoted 0 times

...

Dorian

1 years ago

I don't think creating an Azure AD user is the right choice in this scenario. A role assignment would make more sense.

upvoted 0 times

...

Loise

1 years ago

But I heard some people say that we should create an Azure AD user instead.

upvoted 0 times

...

Antonio

1 years ago

I agree with Dorian. A role assignment will allow the AKS cluster to authenticate to the Azure Container Registry.

upvoted 0 times

...

Dorian

1 years ago

I think we need to create a role assignment for the AKS cluster.

upvoted 0 times

...

Cristen

1 years ago

I'm with Leonardo and 2 on this one. D is definitely the way to go. Although, I do like the idea of Minna about using Key Vault, it's not what the question is asking for.

upvoted 0 times

...

Hmm, I was leaning towards B. Storing the service principal credentials in Azure Key Vault would be a secure way to authenticate. But you both make a good point about the role assignment being the correct answer.

upvoted 0 times

...

Valentin

1 years ago

I agree with Leonardo. The question specifically mentions using the automatically generated service principal, so we don't need to create a new user or group. A role assignment is the way to go.

upvoted 0 times

...

Leonardo

1 years ago

I'm pretty sure the answer is D. We need to create a role assignment to grant the AKS service principal access to the Azure Container Registry. The service principal is automatically generated, so we don't need to create a new user or group.

upvoted 0 times