SC-500 Practice Test

Question 1 of 5

Single choice

An Azure App Service app must read secrets from Azure Key Vault, and the team wants no client secret or password stored in app settings or code. Which identity should the app use?

Choose one answer

A. A system-assigned managed identity with the Key Vault Secrets User role
B. A client secret for an app registration stored in the app settings
C. A shared service account with its password in a server config file
D. An app registration with a certificate placed on the app's file system

Choose an answer or reveal it to continue.

Keyboard shortcuts:A to D or 1 to 4answerEntercheck the answer←→previous or nextFflag for review

SC-500Microsoft Certified: Cloud and AI Security Engineer Associatepractice test