Microsoft Azure Developer Associate AZ-204 Practice Question
You run a build pipeline on an Azure VM that acts as a self-hosted Azure DevOps agent. The pipeline builds Docker images and must push them to a Standard tier Azure Container Registry (ACR) named contosoacr. You must use the least-privileged Azure-native authentication method available. What should you configure?
Grant the VM's system-assigned managed identity the AcrPush role on contosoacr.
Create an Azure AD application and assign it the Owner role at the subscription scope; authenticate with its client secret.
Enable the admin user on contosoacr and use its username and password in the pipeline.
Enable anonymous pull access on contosoacr and use docker push without authentication.
The VM can obtain an Azure Active Directory access token for the registry through its system-assigned managed identity. Assigning that identity the AcrPush role on the specific registry lets it push and pull images while avoiding broader permissions. Enabling the ACR admin user relies on long-lived credentials and is not least-privileged. Granting an application the Owner role at subscription scope exceeds the required rights. Anonymous pull allows unauthenticated pulls only and does not permit pushes, so it does not meet the requirement.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a system-assigned managed identity in Azure?
Open an interactive chat with Bash
What is the AcrPush role in Azure?
Open an interactive chat with Bash
Why is enabling the ACR admin user considered insecure?
Open an interactive chat with Bash
Microsoft Azure Developer Associate AZ-204
Develop Azure compute solutions
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .