Examkin

Question

Difficulty: EasySystem-Assigned and User-Assigned Managed Identities

A developer is configuring security for an Azure App Service instance. They need to understand how managed identities behave when the App Service is deleted or updated. Which of the following statements correctly describe the characteristics of a system-assigned managed identity? (Select TWO).

  1. The identity is tied directly to the lifecycle of the Azure App Service instance.Answer
  2. The identity is automatically deleted when the associated Azure App Service instance is deleted.Answer
  3. C
    The identity is created as a standalone Azure resource with its own lifecycle.
  4. D
    The identity can be shared and assigned to multiple different Azure resources.

Answer

The correct statements are that the system-assigned managed identity is tied directly to the lifecycle of the Azure App Service instance, and it is automatically deleted when the associated App Service instance is deleted.
A system-assigned managed identity is created directly on an Azure resource instance (such as an App Service). As a result, its lifecycle is directly tied to that resource: it is automatically deleted when the resource is deleted, and it cannot be shared with or assigned to any other resources.

Step-by-Step Solution

1
Analyze the lifecycle characteristics of system-assigned managed identities.
System-assigned managed identities are enabled directly on a resource, and their identity in Microsoft Entra ID is tied directly to that resource.
This establishes that the identity's existence depends entirely on the resource's existence.
2
Determine the behavior of the identity when the hosting resource is deleted.
Deleting the Azure App Service instance automatically triggers the cleanup and deletion of the associated system-assigned identity in Microsoft Entra ID.
This ensures that no orphaned identities remain when resources are decommissioned.
3
Contrast with user-assigned managed identities to eliminate incorrect options.
User-assigned managed identities are created as independent Azure resources and can be shared across multiple Azure resources, whereas system-assigned identities are exclusive and have a dependent lifecycle.
This distinguishes system-assigned identities from user-assigned identities.

Key Concept

Managed Identity Lifecycle and Resource Binding
Rate this question

Topics

System-Assigned and User-Assigned Managed Identities

More questions from this topic