Exam AZ-305 topic 1 question 36 discussion

B. System-assigned managed identities System-assigned managed identities provide a way for Azure Functions to authenticate to other Azure services, such as Activity Logs, without the need for storing or managing secrets. This approach minimizes administrative effort because the identity is tied directly to the Azure Functions service and is automatically managed by Azure. When the Azure Functions instance is deleted, the associated managed identity will also be removed. This simplifies the authentication process and helps improve the security posture of your app.

B is the answer. https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview A common challenge for developers is the management of secrets, credentials, certificates, and keys used to secure communication between services. Managed identities eliminate the need for developers to manage these credentials. System-assigned. Some Azure resources, such as virtual machines allow you to enable a managed identity directly on the resource. When you enable a system-assigned managed identity: - A service principal of a special type is created in Azure AD for the identity. The service principal is tied to the lifecycle of that Azure resource. When the Azure resource is deleted, Azure automatically deletes the service principal for you. - By design, only that Azure resource can use this identity to request tokens from Azure AD. - You authorize the managed identity to have access to one or more services. - The name of the system-assigned service principal is always the same as the name of the Azure resource it is created for.

B is correct

B. system-assigned managed identities Explanation: System-assigned managed identities: Automatically managed by Azure. Simplifies authentication by eliminating the need for explicit credentials. Ensures secure and seamless access to Azure resources, such as activity logs, without additional administrative overhead.

Given answer B is correct

B is correct

Azure Functions provide a Managed Identity and since the question is about Azure Functions not about the App being developed, the correct answer is B.

B. system-assigned managed identities reduce administrative efforts - B makes more sense

B makes the most sense. https://learn.microsoft.com/en-us/azure/azure-functions/security-concepts?tabs=v4 https://learn.microsoft.com/en-us/azure/app-service/overview-authentication-authorization

No doubts here

Should be A

Correct

Seems correct.

A first you need to register the App

B, tested in the lab! :p