Crucial Exams

Microsoft Azure Solutions Architect Expert AZ-305 Practice Question

You are designing the authentication model for a new Azure Kubernetes Service (AKS) cluster that will host several microservices. The pods must upload and download blobs from an Azure Storage account. Requirements:

  • Credentials must never be stored in container images, configuration files, or environment variables.
  • Credential rotation must occur automatically without redeploying the applications. Which solution should you recommend?

  • Create a service principal for the AKS cluster, store its client secret in cluster-wide secrets, and grant it the Storage Account Key Operator Service Role on the storage account.

  • Create a user-assigned managed identity, assign it to the AKS node resource group, and grant the identity the Storage Blob Data Contributor role on the storage account.

  • Generate a shared access signature (SAS) for the storage account and inject it into each pod by using a Kubernetes secret.

  • Enable Azure AD authentication on the storage account and give every microservice an Azure AD application and client secret stored in Azure Key Vault.

Microsoft Azure Solutions Architect Expert AZ-305
Design identity, governance, and monitoring solutions
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot