Weekend Sale Special Limited Time 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: CFsave75

Microsoft Cybersecurity Architect SC-100 Question # 25 Topic 3 Discussion

Microsoft Cybersecurity Architect SC-100 Question # 25 Topic 3 Discussion

SC-100 Exam Topic 3 Question 25 Discussion:
Question #: 25
Topic #: 3

You have an Azure AD tenant that syncs with an Active Directory Domain Services (AD DS) domain.

You are designing an Azure DevOps solution to deploy applications to an Azure subscription by using continuous integration and continuous deployment (CI/CD) pipelines.

You need to recommend which types of identities to use for the deployment credentials of the service connection. The solution must follow DevSecOps best practices from the Microsoft Cloud Adoption Framework for Azure.

What should you recommend?


A.

an Azure AD user account that has a password stored in Azure Key Vault


B.

a group managed service account (gMSA)


C.

an Azure AD user account that has role assignments in Azure AD Privileged Identity Management (PIM)


D.

a managed identity in Azure


Get Premium SC-100 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.