You have the following Azure Resources: Azure Key vault named KeyVault1 Azure App Service named WebApp1 YOu need to ensure that WebApp1can access KeyVault1 by using Azure Active Directory Authentication Which two settings can be used to configure WebApp1? a) User assigned managed identity b) Application Settings c) TLS/SSL Bindings d) App Service Authentication e) System assigned managed identity
Question
You have the following Azure Resources: Azure Key vault named KeyVault1 Azure App Service named WebApp1 YOu need to ensure that WebApp1can access KeyVault1 by using Azure Active Directory Authentication Which two settings can be used to configure WebApp1? a) User assigned managed identity b) Application Settings c) TLS/SSL Bindings d) App Service Authentication e) System assigned managed identity
Solution
The two settings that can be used to configure WebApp1 to access KeyVault1 using Azure Active Directory Authentication are:
a) User assigned managed identity e) System assigned managed identity
Here's a step-by-step guide:
-
Enable a managed identity: A managed identity is an identity registered in Azure Active Directory that is automatically managed by Azure. You can enable either a system-assigned managed identity or a user-assigned managed identity.
-
For a system-assigned managed identity, go to the Azure portal, find your App Service instance (WebApp1), and then go to the "Identity" pane. Under the "System assigned" tab, switch the Status to "On", and then save your changes.
-
For a user-assigned managed identity, you need to create the identity first. Once created, you can go to the "Identity" pane of your App Service instance, and then under the "User assigned" tab, click "Add". In the "Add managed identity" pane, select your identity, and then click "Add".
-
Grant the managed identity access to the Key Vault: Go to the Key Vault instance (KeyVault1), and then go to the "Access policies" pane. Click "+ Add Access Policy", and then in the "Add access policy" pane, configure the permissions you want to grant to the managed identity. In the "Select principal" field, select the managed identity, and then click "Add".
-
Update your application's code to use the managed identity to access the Key Vault. The exact code depends on the language and SDK you're using.
Similar Questions
You are designing an application that will store data in Azure Storage.You need to recommend a solution to ensure that data in the storage account is encrypted by using customer-managed keys.What should you include in the recommendation?Select only one answer.Azure Key VaultAzure Private LinkService endpointShared access signature
Your company plans to migrate an on-premises PHP web app named WebApp1 to Azure.You need to recommend which Azure service to use to run App1. The solution must minimize administrative effort.Which service should you recommend?Select only one answer.Azure App ServiceAzure KubernetesAzure Logic AppsAzure virtual machines
Question #18Topic 2HOTSPOT -You have the Azure resources shown in the following table.WebApp1 uses the Standard pricing tier.You need to ensure that WebApp1 can access the virtual machines deployed to Vnet1\Subnet1 and Vnet2\Subnet1. The solution must minimize costs.What should you create in each virtual network? To answer, select the appropriate options in the answer area.Hot Area:Reveal Solution Discussion 24
Your company plans to migrate an ASP.NET website to an Azure App Service named App1.You need to design a solution for App1 that meets the following requirements:Provides a development environment and a production environmentCan instantly swap environments without downtimeWhat should you include in the design?Select only one answer.a load balancer and two virtual machinestwo Azure Storage accountstwo deployment slotstwo snapshots
Subscription: Your Azure subscription.Resource group: Create or select a resource group.Name: Enter a unique name for your workspace.Region: Select the closest geographical region.Storage account: Note the default new storage account that will be created for your workspace.Key vault: Note the default new key vault that will be created for your workspace.Application insights: Note the default new application insights resource that will be created for your workspace.Container registry: None (one will be created automatically the first time you deploy a model to a container).
Upgrade your grade with Knowee
Get personalized homework help. Review tough concepts in more detail, or go deeper into your topic by exploring other relevant questions.