DRAG DROP - You are developing a web service that will run on Azure virtual machines that use Azure Storage. You configure all virtual machines to use managed i...


Microsoft AZ-204 Exam

Questions Number: 100 out of 355 Questions
28.17%

Question 100
DRAG DROP -
You are developing a web service that will run on Azure virtual machines that use Azure Storage. You configure all virtual machines to use managed identities.
You have the following requirements:
- Secret-based authentication mechanisms are not permitted for accessing an Azure Storage account.
- Must use only Azure Instance Metadata Service endpoints.
You need to write code to retrieve an access token to access Azure Storage. To answer, drag the appropriate code segments to the correct locations. Each code segment may be used once or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:
AZ-204_100Q.jpg related to the Microsoft AZ-204 Exam



Azure Instance Metadata Service endpoints "/oauth2/token"
Box 1:
http://169.254.169.254/metadata/identity/oauth2/token
Sample request using the Azure Instance Metadata Service (IMDS) endpoint (recommended):
GET 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://management.azure.com/' HTTP/1.1 Metadata: true
Box 2: JsonConvert.DeserializeObject<Dictionary<string,string>>(payload);
Deserialized token response; returning access code.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/how-to-use-vm-token
https://docs.microsoft.com/en-us/azure/service-fabric/how-to-managed-identity-service-fabric-app-code





Previous Questions Next Questions