Microsoft Exam AZ-500 Topic 1 Question 56 Discussion

Actual exam question for Microsoft's AZ-500 exam

Question #: 56
Topic #: 1

You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.

You need to use the automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.

What should you create?

Aan Azure AD user

Ba secret in Azure Key Vault

Can Azure AD group

Da role assignment

Show Suggested Answer

Suggested Answer: D

by Tarra at Mar 19, 2024, 02:06 AM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leah

6 months ago

I'm leaning towards creating a secret in Azure Key Vault. That way we can securely store the authentication information for the AKS cluster.

upvoted 0 times

...

Dorian

6 months ago

I don't think creating an Azure AD user is the right choice in this scenario. A role assignment would make more sense.

upvoted 0 times

...

Loise

6 months ago

But I heard some people say that we should create an Azure AD user instead.

upvoted 0 times

...

Antonio

6 months ago

I agree with Dorian. A role assignment will allow the AKS cluster to authenticate to the Azure Container Registry.

upvoted 0 times

...

Dorian

7 months ago

I think we need to create a role assignment for the AKS cluster.

upvoted 0 times

...

Cristen

8 months ago

I'm with Leonardo and 2 on this one. D is definitely the way to go. Although, I do like the idea of Minna about using Key Vault, it's not what the question is asking for.

upvoted 0 times

...

Hmm, I was leaning towards B. Storing the service principal credentials in Azure Key Vault would be a secure way to authenticate. But you both make a good point about the role assignment being the correct answer.

upvoted 0 times

...

Valentin

8 months ago

I agree with Leonardo. The question specifically mentions using the automatically generated service principal, so we don't need to create a new user or group. A role assignment is the way to go.

upvoted 0 times

...

Leonardo

8 months ago

I'm pretty sure the answer is D. We need to create a role assignment to grant the AKS service principal access to the Azure Container Registry. The service principal is automatically generated, so we don't need to create a new user or group.

upvoted 0 times