Crucial Exams

Microsoft DevOps Engineer Expert AZ-400 Practice Question

An Azure Function app written in C# must read messages from an Azure Service Bus queue and write records to Azure SQL Database. The security team requires that:

  • No credentials are stored in source code or application configuration.
  • Credential rotation must occur automatically without administrator intervention.
  • The identity used must be deleted automatically when the Function app is deleted.

Which identity solution should you recommend?

  • Register an Azure AD application and store its client secret in Azure Key Vault for the Function app to retrieve at runtime.

  • Enable a system-assigned managed identity for the Function app and grant it the required Azure RBAC roles.

  • Create a user-assigned managed identity and share it across all serverless workloads in the subscription.

  • Use an Azure AD application that authenticates with a certificate managed outside Azure and reference the certificate thumbprint in the Function app.

Microsoft DevOps Engineer Expert AZ-400
Develop a security and compliance plan
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot