Your team builds Docker images in a CI/CD pipeline and needs to store them privately before deployment to Azure Kubernetes Service. The security team requires that only authenticated service principals can pull images, and that old image tags are automatically purged after 30 days to reduce storage costs. Which Azure service and features satisfy both requirements?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Azure Container Registry (ACR) with role-based access control (AcrPull role) for authentication, and ACR lifecycle management policies or automated tasks for purging old images

Azure Container Registry (ACR) is the native Azure private registry for Docker images. RBAC with the AcrPull role restricts pull access to authorized identities. ACR Tasks or lifec...

📋Part of Microsoft Certified: Azure Developer Associate (AZ-204) · Azure Certification Practice
Real Exam ScenarioAzure Container Registry

Your team builds Docker images in a CI/CD pipeline and needs to store them privately before deployment to Azure Kubernetes Service. The security team requires that only authenticated service principals can pull images, and that old image tags are automatically purged after 30 days to reduce storage costs. Which Azure service and features satisfy both requirements?

✓ Correct Answer & ExplanationAzure Container Registry

Correct Answer

Azure Container Registry (ACR) with role-based access control (AcrPull role) for authentication, and ACR lifecycle management policies or automated tasks for purging old images

Why This Answer Is Correct

Azure Container Registry (ACR) is the native Azure private registry for Docker images. RBAC with the AcrPull role restricts pull access to authorized identities. ACR Tasks or lifecycle management (az acr run with purge commands) can automatically remove untagged or old manifests on a schedule.

📚 What This Question Tests

This question evaluates your knowledge of Azure Container Registry — a core concept tested in Microsoft Certified: Azure Developer Associate (AZ-204). Understanding Azure Container Registry is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.

All Microsoft Certified: Azure Developer Associate (AZ-204) Questions →Browse All Azure Exams →

More Azure Container Registry Practice Questions

Your development team builds Docker images in a CI/CD pipeline and needs to store them securely in Azure. Only Azure Kubernetes Service (AKS) and Azure Container Instances (ACI) in the same subscription should be able to pull images without using admin credentials. What is the recommended setup?

← Back to Microsoft Certified: Azure Developer Associate (AZ-204) Full Practice Hub