Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: DevOps Engineer Expert · Microsoft
Step Sequence / Reordering Question
Add and arrange the steps in the correct execution order.
Hotspot Solution:
Service connection type: Azure Resource Manager Authentication/authorization method for the connection: Managed Service Identity (MSI) Azure Resource Manager service type: This service connection type specifically targets Azure resources, including Key Vault. It allows your pipeline to interact with Key Vault using the Managed Service Identity assigned to the Azure DevOps project. Managed Service Identity (MSI) authentication: This eliminates the need to store sensitive information like credentials or tokens within your pipeline. Instead, the pipeline leverages its assigned MSI to access resources securely. Azure automatically manages and rotates the MSI credentials, enhancing security and reducing the risk of exposure.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The requirement explicitly states to "Avoid persisting credentials and tokens in Azure DevOps." Using Managed Identity (MSI) allows the self-hosted build agent running on an Azure VM/VMSS to authenticate directly using its Azure AD identity. This completely eliminates the need to store static client secrets, Service Principal keys, or OAuth tokens in Azure DevOps.
ARM & Managed Identity https://learn.microsoft.com/en-us/azure/devops/pipelines/library/service-endpoints?view=azure-devops
Copilot : Service connection type: Azure Resource Manager Authentication/authorization method for the connection: Managed Service Identity Authentication