A company has a legacy application that runs on an on-premises server and needs to access an Azure SQL database. The application cannot be modified to support managed identities. The security team wants to use a service principal with a certificate for authentication. What should you do?

Create a user-assigned managed identity and assign it to the on-premises server.

Store the SQL database password in the application's configuration file.

Use the application's client ID as the username and a shared secret as the password.

Create an app registration, upload a certificate as its credential, and use the service principal to authenticate to the database.

Microsoft Certified:Azure Security Engineer Associate

Domain 1Objective 2

Manage Microsoft Entra Application Access and Managed Identities AZ-500 Practice Questions (Page 8)

Part of the Secure identity and access domain, which accounts for 15–20% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

6concepts

15–20%of the exam

Questions 36–36

36application · medium
A company has a legacy application that runs on an on-premises server and needs to access an Azure SQL database. The application cannot be modified to support managed identities. The security team wants to use a service principal with a certificate for authentication. What should you do?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.

Manage Microsoft Entra Application Access and Managed Identities AZ-500 Practice Questions (Page 8)

Questions 36–36

A company has a legacy application that runs on an on-premises server and needs to access an Azure SQL database. The application cannot be modified to support managed identities. The security team wants to use a service principal with a certificate for authentication. What should you do?

Keep studying — Secure identity and access