SC-100 Practice Question 4004
Exam: SC-100
Domain: Design security solutions for applications and data
Difficulty: easy
An architect is designing an authentication architecture for a custom cloud microservices application hosted on Azure App Service connecting to Azure SQL Database. What should you mandate to eliminate static credentials in code?
Answer Options
A
Managed Identities for Azure resources (System-assigned or User-assigned)
B
Cleartext SQL connection strings stored in appsettings.json
C
Sharing the database administrator password across development staff
D
Disabling authentication on the Azure SQL database
Correct Answer
A: Managed Identities for Azure resources (System-assigned or User-assigned)
Explanation
Mandate Managed Identities for Azure resources (System-assigned or User-assigned), allowing App Service to authenticate to Azure SQL via Microsoft Entra tokens without credentials.