SC-300 Practice Question 3460
Exam: SC-300
Domain: Plan and implement workload identities
Difficulty: easy
An application running on an Azure Virtual Machine needs to authenticate securely to Azure Key Vault to fetch connection strings without hardcoding credentials or certificates in code. What should you configure?
Answer Options
A
Managed Identity (System-assigned or User-assigned)
B
A static password stored in web.config
C
An on-premises Active Directory service account
D
A personal user credential with MFA enabled
Correct Answer
A: Managed Identity (System-assigned or User-assigned)
Explanation
A Managed Identity (System-assigned or User-assigned) provides an automatically managed identity in Microsoft Entra ID that Azure resources use to authenticate without managing credentials.