A simple supported App Service should have an identity tied to its own lifecycle and avoid stored client secrets. Which recommendation best fits?

Choose the single best answer.

A.Enable system-assigned identity and grant the target's required permissions.
B.Store a long-lived application client secret in the app configuration and rotate it manually.
C.Enable managed identity and assume the target data roles are granted automatically.
D.Deploy a user-assigned identity shared with unrelated production workloads without a reuse requirement.

Show the answer and explanation

✓ Correct answer

Enable system-assigned identity and grant the target's required permissions.

System-assigned identity fits this resource's lifecycle and avoids application-owned secrets, but target authorization remains necessary. Unnecessary identity sharing can combine privileges, while a stored client secret adds credential-management burden. Managed identity enablement alone does not grant target access. Source: AZ-305 Study Guide.pdf, PDF page(s) 15.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.