StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Application architecture

Practice question 309 of 400 · hard

A release pipeline must avoid long-lived Azure secrets and make production artifacts traceable. Which two practices fit? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Store a permanent administrator password in every pipeline variable group
  2. B.Treat a successful ARM deployment as the only user-path health check
  3. C.Rebuild from an unpinned branch separately in each environment
  4. D.Use supported workload identity federation or managed identity for deployment authentication
  5. E.Build once and promote the same immutable artifact through validated environments
Show the answer and explanation

✓ Correct answers

  • Use supported workload identity federation or managed identity for deployment authentication
  • Build once and promote the same immutable artifact through validated environments

Federated or managed identity reduces embedded credentials, and one immutable artifact preserves release identity. Rebuilding creates unverified differences, permanent admin credentials increase exposure, and infrastructure success does not prove application behavior. Source guide: PDF page(s) 54.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.