SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ187

Design solutions that align with security best practices and priorities

You have an Azure subscription and an Azure DevOps organization.

You need to recommend a solution that connects Azure DevOps pipelines to resources in the subscription by using Azure Resource Manager (ARM) service connections. The solution must follow Microsoft Cloud Adoption Framework for Azure best practices, including the principle of least privilege.

What should the recommendation include?

  • A service principals and secrets
  • B workload identity federation and service principals
  • C workload identity federation and user-assigned managed identities
  • D workload identity federation and system-assigned managed identities
Explanation

Microsoft Cloud Adoption Framework guidance recommends OpenID Connect workload identity federation for Azure DevOps service connections and advises against client secrets or certificates. It supports user-assigned managed identities, which can be created separately for each application and environment and granted only the required Azure roles and scopes, enabling least-privilege access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!