StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · SaaS PaaS IaaS containers and AI services

Practice question 337 of 498 · easy

An Azure AI application should avoid storing a long-lived service API key where supported. Which authentication approach fits?

Choose the single best answer.

  1. A.Microsoft Entra managed identity with scoped permissions
  2. B.API Management frontend authentication while retaining a static backend service key
  3. C.A private endpoint with the same long-lived API-key authentication
  4. D.A service principal client secret stored in application configuration
Show the answer and explanation

✓ Correct answer

  • Microsoft Entra managed identity with scoped permissions

A managed identity provides supported service tokens with scoped permissions and avoids a stored API key. A service principal client secret introduces another stored credential. Private connectivity does not change API-key authentication, and frontend authentication alone can leave the static backend key in place.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.