Examkin

Question

Difficulty: EasyImplement Azure Event Grid Solutions

An organization requires secure delivery of events from an Azure Event Grid system topic to an Azure Service Bus queue. To minimize administration overhead, you need to configure the Event Grid topic with a managed identity whose lifecycle is automatically tied to the Azure resource itself. Which configuration should you apply to the Event Grid system topic?

  1. Configure a system-assigned managed identity.Answer
  2. B
    Configure a user-assigned managed identity.
  3. C
    Configure a Shared Access Signature (SAS) token with queue-level scope.
  4. D
    Configure a Key Vault secret access policy for the Event Grid resource provider.

Answer

Configure a system-assigned managed identity.
Configuring a system-assigned managed identity enables Azure Event Grid to authenticate and deliver events to the Service Bus queue securely. Because the identity is system-assigned, its lifecycle is managed entirely by Azure and is bound directly to the Event Grid system topic resource itself, meaning it is automatically deleted when the topic is deleted.

Step-by-Step Solution

1
Identify the lifecycle requirement for the managed identity.
The identity must have its lifecycle tied directly to the Event Grid system topic resource.
This determines whether a system-assigned or user-assigned identity is appropriate.
2
Compare managed identity types.
System-assigned identities are tied to the resource lifecycle, whereas user-assigned identities have independent lifecycles.
To satisfy the constraint that the identity is deleted when the resource is deleted, a system-assigned identity is required.

Key Concept

Azure Event Grid managed identity authentication
Estimated Time:1m 0s
Rate this question

Topics

Implement Azure Event Grid Solutions