ExpertAZ-305 · Question 14 · Domain 1.4: Design identities and access for applications
You are designing an architecture for a multi-tier application. The application runs on a cluster of 10 Azure Virtual Machines that are part of a Virtual Machine Scale Set (VMSS).
The application needs to securely retrieve database connection strings from Azure Key Vault. The VMs are frequently scaled in and out based on demand. You need to design an identity solution for the VMs to authenticate to Key Vault that minimizes administrative overhead and prevents credential leakage.
Which identity solution should you recommend?
You are designing an architecture for a multi-tier application. The application runs on a cluster of 10 Azure Virtual Machines that are part of a Virtual Machine Scale Set (VMSS).
The application needs to securely retrieve database connection strings from Azure Key Vault. The VMs are frequently scaled in and out based on demand. You need to design an identity solution for the VMs to authenticate to Key Vault that minimizes administrative overhead and prevents credential leakage.
Which identity solution should you recommend?
Answer options:
A User-assigned managed identity attached to the VMSS.
A System-assigned managed identity enabled on each VM instance.
A Service Principal with a client secret stored in a configuration file on the VMs.
Azure AD B2B guest accounts for the application service accounts.
How to approach this question
Full Answer
Common mistakes
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 1
55 questions · hints · full answers · grading