Practice Test 1 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
A company has an Azure subscription and an Azure tenant. The company is planning to deploy a web application that will work with a CosmosDB account. The CosmosDB account will consist of a database that will be the back-end tier for the application. The Web application will be deployed using the Azure Web App service.
Users will need to authenticate using their Azure AD account and access the CosmosDB account by using resource tokens.
Which of the following task would you implement for the CosmosDB account for authentication purposes?
A. Authenticate Azure AD users and generate resource tokens.
B. Authenticate Azure AD users and relay resource tokens.
C. Create database users and generate resource tokens.
D. Create database users and relay resource tokens.
Answer – C
Below is a design pattern provided in the Microsoft documentation. An application can request tokens when interacting with a CosmosDB account.
Now here, the application would use the identity to ask CosmosDB to generate a resource token. Alternatively, you would also create database users in CosmosDB.
Below is a code snippet from the Microsoft documentation detailing the creation of users.
Options A and B are incorrect since the application is responsible for authenticating the users with Azure AD.
Option D is incorrect since CosmosDB would not relay the resource tokens.
For more information on securing access to data in CosmosDB, one can visit the below URL-
https://docs.microsoft.com/en-us/azure/cosmos-db/secure-access-to-data
Comments are closed, but trackbacks and pingbacks are open.