Microsoft Azure Developer Associate AZ-204 Practice Question

You are developing a .NET 6 App Service web app that must upload files to an Azure Storage account by using the Azure SDK. The solution must avoid storing any credentials in code, and the identity must remain available even if the web app is deleted and recreated in another region. What should you do?

  • Enable a system-assigned managed identity on the web app and grant it the Storage Blob Data Contributor role on the storage account.

  • Generate a service SAS token for the storage account and store the token in an App Service application setting.

  • Create an Azure AD application with a client secret, store the secret in Azure Key Vault, and retrieve it at runtime by using DefaultAzureCredential.

  • Create a user-assigned managed identity, assign it the Storage Blob Data Contributor role on the storage account, and associate the identity with the web app.

Microsoft Azure Developer Associate AZ-204
Implement Azure security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot