Free Microsoft Azure AZ-500 Actual Exam Questions - Question 10 Discussion
You need to use the automatically generated service principal for the AKS cluster to authenticate to
the Azure Container Registry.
What should you create?
D for sure, role assignment lets the service principal access the registry.
Probably D. The question mentions using the auto-generated service principal, so the main step is granting it permission to the container registry. Creating a role assignment is exactly that—assigning the needed role (like AcrPull) to the service principal so AKS can authenticate and pull images. The other options don’t fit since you’re not creating new users or secrets here, just giving existing SP rights.
Makes sense to focus on permissions here. You’d create a role assignment (D) to give the service principal access to the registry, so it can pull images.
I’m not totally sure - do we know if the cluster’s service principal already exists and has the right permissions? Seems like D might be about assigning permissions, but does it cover using the auto-generated SP specifically?