Developing Solutions for Microsoft Azure AZ-204 — Topic 4 Question 205

Question

You develop and deploy an Azure Logic app that calls an Azure Function app. The Azure Function app includes an OpenAPI (Swagger) definition and uses an Azure Blob storage account. All resources are secured by using Azure Active Directory (Azure AD). The Azure Logic app must securely access the Azure Blob storage account. Azure AD resources must remain if the Azure Logic app is deleted. You need to secure the Azure Logic app. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create a user-assigned managed identity and assign role-based access controls. A Managed Identity lets Azure resources authenticate to services without storing credentials. Azure RBAC grants least-privilege access by assigning built-in or custom roles at a defined scope.

Developing Solutions for Microsoft Azure AZ-204 — Question 205