AZ-204: Developing Solutions for Microsoft Azure

By Microsoft · Question Mode

QuestionQ27

Connect to and consume Azure services and third-party services

You have two Azure Container Registry (ACR) instances: ACR01 and ACR02.

You plan to implement a containerized application named APP1 that will use a base image named BASE1. The APP1 image will be stored in ACR01, while the BASE1 image will be stored in ACR02.

You need to automate the planned implementation by using five Azure CLI commands. The solution must ensure that the APP1 image in ACR01 is automatically updated when the BASE1 image is updated.

In which order should you perform the actions?

Note: More than one ordering of the answer choices is correct. You receive credit for any correct order.

Drag & Drop
Explanation

Following the Microsoft tutorial for triggering an app-image rebuild when a base image in a different registry is updated: first build the base image into ACR02 with 'az acr build'; then create the tracking task in ACR01 with 'az acr task create --assign-identity' (which provisions the task's managed identity); then grant that identity pull rights on ACR02 with 'az role assignment create'; then attach the cross-registry credential to the task with 'az acr task credential add --use-identity [system]'; finally run 'az acr task run' once so the task discovers its base-image dependency. The role assignment must precede the credential add because the credential references the identity that the role grants access to (the note confirms multiple orderings can earn credit, but this is the documented sequence).

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!