An enterprise wants to secure their cloud-native applications by eliminating the need for long-lived secrets when their workloads (running in AKS or GitHub Actions) access Azure resources. Which identity feature should they implement?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Workload Identity Federation

Workload Identity Federation allows you to use external identities (like GitHub OIDC or K8s Service Accounts) to authenticate with Microsoft Entra without managing secrets....

๐Ÿ“‹Part of Microsoft Certified: Azure Solutions Architect Expert (AZ-305) ยท Azure Certification Practice
Real Exam ScenarioMicrosoft Entra ID

An enterprise wants to secure their cloud-native applications by eliminating the need for long-lived secrets when their workloads (running in AKS or GitHub Actions) access Azure resources. Which identity feature should they implement?

โœ“ Correct Answer & ExplanationMicrosoft Entra ID

Correct Answer

Workload Identity Federation

Why This Answer Is Correct

Workload Identity Federation allows you to use external identities (like GitHub OIDC or K8s Service Accounts) to authenticate with Microsoft Entra without managing secrets.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Microsoft Entra ID โ€” a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Microsoft Entra ID is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.