AZ-200 Azure Security & Identity

Question 1

What is a managed identity in Azure, and why should developers use it?

Accepted Answer

An automatically managed Azure AD identity for Azure services, eliminating the need to store credentials in code

Answer

Managed identities provide an Azure AD identity automatically managed by Azure, allowing services to authenticate to other Azure services without credentials in code.

Question 2

What is the difference between a system-assigned and user-assigned managed identity?

Accepted Answer

System-assigned is tied to a single resource and deleted with it; user-assigned is standalone and reusable

Answer

System-assigned identities are created and deleted with the resource, while user-assigned identities exist independently and can be assigned to multiple resources.

Question 3

Which Azure Key Vault object type should be used to store a database connection string?

Accepted Answer

Secret

Answer

Key Vault Secrets are designed to store sensitive string values like passwords, connection strings, and API keys securely.

Question 4

How does Azure AD OAuth2 client credentials flow work for service-to-service authentication?

Accepted Answer

The app authenticates directly with Azure AD using its client ID and secret/certificate to obtain an access token

Answer

Client credentials flow allows an application to authenticate as itself (not a user) by presenting its client ID and secret or certificate to Azure AD to get an access token.

Question 5

What is the purpose of RBAC role assignments in Azure?

Accepted Answer

Grant a security principal (user/group/identity) specific permissions to an Azure resource

Answer

RBAC role assignments attach a role definition to a security principal at a specific scope, granting the permissions defined in that role to the principal.

AZ-200 - Microsoft Azure Developer Practice Test

AZ-200 - Microsoft Azure Developer Practice Test

AZ-200 Azure Security & Identity