Exam AZ-140 topic 5 question 3 discussion

Correct

This is the statement from Microsoft regarding this question. The answer is A because D will be deprecated on September 30, 2023. Important Azure Automation Run As Account will retire on September 30, 2023 and will be replaced with Managed Identities. Before that date, you'll need to start migrating your runbooks to use managed identities. For more information, see migrating from an existing Run As accounts to managed identity to start migrating the runbooks from Run As account to managed identities before 30 September 2023.

One question: why "a managed identity in Azure AD"? Pool1 is NOT integrated with Azure AD but with Azure AD DS

A create managed identity https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-scaling-script Azure automation account is already created

To authorize Azure Automation runbooks to manage the scaling of your Azure Virtual Desktop host pool while minimizing administrative effort, you should configure a managed identity in Azure Active Directory (Azure AD). Managed identities simplify the process of granting the necessary permissions to Azure resources without the need for manual credential management. Therefore, the correct answer is: A. a managed identity in Azure Active Directory (Azure AD)

A. a managed identity

"A managed identity from Microsoft Entra ID allows your runbook to easily access other Microsoft Entra protected resources. The identity is managed by the Azure platform and doesn't require you to provision or rotate any secrets. For more information about managed identities in Microsoft Entra ID, see Managed identities for Azure resources. Managed identities are the recommended way to authenticate in your runbooks, and is the default authentication method for your Automation account." https://learn.microsoft.com/en-us/azure/automation/automation-security-overview

A. a managed identity in Azure Active Directory (Azure AD)

A Azure Automation Run as accounts, including Classic Run as accounts have retired on 30 September 2023 and replaced with Managed Identities. You would no longer be able to create or renew Run as accounts through the Azure portal. https://learn.microsoft.com/en-us/azure/automation/migrate-run-as-accounts-managed-identity?tabs=sa-managed-identity

I take answer A because the Microsoft exam should adapt to the changes. Now that you have an Azure Automation account, you'll also need to set up a managed identity if you haven't already. Managed identities will help your runbook access other Azure AD-related resources as well as authenticate important automation processes. https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-scaling-script#create-a-managed-identity

The answer is A

A should be correct now but D was before As of April 1, 2023, Run As accounts no longer work. We recommend you use managed identities instead. Another great MS question. I wander if they accept both on the exam https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-scaling-script#create-a-managed-identity

A is correct (preferred), D is technically possible https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-scaling-script This scaling tool uses a Run As account with Azure Automation. Azure Automation Run As accounts will retire on September 30, 2023. Microsoft won't provide support beyond that date. From now through September 30, 2023, you can continue to use Azure Automation Run As accounts. This scaling tool won't be updated to create the resources using managed identities, however, you can transition to use managed identities and will need to before then. For more information, see Migrate from an existing Run As account to a managed identity.

managed identity A managed identity from Azure Active Directory (Azure AD) allows your runbook to easily access other Azure AD-protected resources. The identity is managed by the Azure platform and doesn't require you to provision or rotate any secrets.

A is correct since Run as account will be removed "Azure Automation Run As Account will retire on September 30, 2023 and will be replaced with Managed Identities." https://learn.microsoft.com/en-us/azure/automation/automation-security-overview

You can use both but manage identity minimize administrative effort. Strongly recommended to use by MS. I am using it a lot.

The solution must minimize administrative effort.