An AKS cluster will connect to an Azure Container Registry. Use the AKS cluster's automatically generated service principal to authenticate to the registry. What resource should you create to enable this authentication?
Choose an answer
Tap an option to check your answer.
Correct answer: A role assignment.
Why this is the answer
To enable an AKS cluster's service principal to authenticate to an Azure Container Registry (ACR), you must create a role assignment. This grants the service principal the necessary permissions, such as AcrPull, to access images in the registry. The service principal is an identity automatically created for the AKS cluster. A secret in Azure Key Vault is used for storing sensitive information securely, but it doesn't directly grant access permissions to ACR for a service principal. An Azure AD user or group could be assigned permissions, but the question specifically asks about using the AKS cluster's automatically generated service principal, which requires a role assignment directly to that principal.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed