az-305 Practice Question 1959
Exam: az-305
Domain: Design identity, governance, and monitoring solutions
Topic: Design authentication and authorization
Difficulty: medium
In a scenario where you need to securely access resources in Azure from a managed service without using client secrets or certificates, which Managed Identity type should you use, and why is it suitable for this scenario?
Answer Options
A
Azure AD App-only tokens
B
System-assigned managed identities
C
Azure AD User-assigned managed identities
D
Azure AD B2C
Correct Answer
B: System-assigned managed identities
Explanation
System-assigned managed identities are ideal for scenarios where you want to grant access to Azure resources without managing any secrets. They are automatically assigned to Azure resources and can be used to authenticate to Azure services and other cloud services that support Azure AD authentication. User-assigned managed identities are more flexible as they can be assigned to multiple resources but require additional management. Azure AD App-only tokens are used for applications and do not involve user interaction, while Azure AD User-assigned managed identities are specific to individual users and not suitable for service-to-service communication.