StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Application lifecycle workload identities and APIs

Practice question 432 of 498 · hard

A deployment workflow outside Azure must access one resource group without stored credentials. Which two design elements are necessary? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.A guarantee that token exchange alone grants all deployment rights
  2. B.A shared human identity for every workflow
  3. C.Least-privilege resource authorization for the resulting Entra identity
  4. D.A public backend so authentication can be skipped
  5. E.A supported federated trust for the intended external workload identity
Show the answer and explanation

✓ Correct answers

  • Least-privilege resource authorization for the resulting Entra identity
  • A supported federated trust for the intended external workload identity

Federation supplies secretless authentication and scoped authorization permits the intended deployment. Public access and shared humans are poor substitutes, and token exchange does not automatically provide resource permissions.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.