SC-300 Practice Question 3468
Exam: SC-300
Domain: Plan and implement workload identities
Difficulty: hard
You need to allow a GitHub Actions CI/CD deployment pipeline to deploy workloads into Azure without storing static Azure client secrets in the GitHub repository. What should you configure?
Answer Options
A
Workload Identity Federation
B
Storing Global Admin credentials in repository secrets
C
Deploying an on-premises AD FS farm in Azure
D
Using Basic Authentication over port 80
Correct Answer
A: Workload Identity Federation
Explanation
Workload Identity Federation allows external workloads (such as GitHub Actions or Kubernetes pods) to exchange external OIDC tokens for Microsoft Entra access tokens securely.