Microsoft Azure Developer Associate AZ-204 Practice Question
Your team deploys eight Azure Functions running in separate Function App instances across multiple resource groups. The CI/CD pipeline may delete and recreate any Function App at any time. Each function must read secrets from the same Azure Key Vault while keeping administration minimal and never storing credentials in code. Which identity configuration satisfies the requirements?
Enable a system-assigned managed identity on every Function App and grant each identity Key Vault access after each deployment.
Create a single user-assigned managed identity, grant it access to the Key Vault, and attach that identity to each Function App.
Generate a shared SAS token for the Key Vault and store the token in Azure App Configuration for all Function Apps.
Register an Azure AD application, create a client secret, and store the secret as an application setting in each Function App.
A user-assigned managed identity is created as an independent Azure resource, so its service principal and permissions are not deleted when a Function App is removed. The same identity can be attached to multiple Function Apps, allowing you to grant Key Vault access once and reuse it across deployments. A system-assigned identity is tied to the life-cycle of its host resource, so Key Vault access would have to be re-granted every time the Function App is recreated. Using an Azure AD application with a client secret or using a shared SAS token would re-introduce credential storage and secret rotation overhead, which contradicts the requirement to avoid storing credentials in code and keep administration minimal.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
Why is a user-assigned managed identity preferred over a system-assigned managed identity in this scenario?
Open an interactive chat with Bash
What is Azure Key Vault and how does it integrate with managed identities?
Open an interactive chat with Bash
How does minimal administration benefit CI/CD pipelines in Azure environments?
Open an interactive chat with Bash
Microsoft Azure Developer Associate AZ-204
Implement Azure security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .