Crucial Exams

Microsoft Azure Solutions Architect Expert AZ-305 Practice Question

You are designing an authentication strategy for several Azure Kubernetes Service (AKS) clusters that pull container images from a single Azure Container Registry (ACR) in another subscription. The solution must meet the following requirements:

  • No credentials may be stored in Kubernetes manifests or cluster nodes.
  • Credential rotation must occur automatically, without administrative action.
  • Each cluster must have only the AcrPull permission on the registry.
  • Future clusters deployed from an ARM template must obtain access with no additional scripting.

Which approach should you recommend?

  • Create an Azure AD service principal, assign it the AcrPull role, and reference its client secret in each cluster's imagePullSecret.

  • Create a user-assigned managed identity for each AKS cluster and assign it the AcrPull role on the target ACR.

  • Enable the ACR admin user and configure its username and password as a Kubernetes secret in every cluster.

  • Register a single Azure AD application protected by a certificate, assign AcrPull on the registry, and configure Azure AD pod-identity in each cluster to use that application.

Microsoft Azure Solutions Architect Expert AZ-305
Design identity, governance, and monitoring solutions
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot