AZ-204 Develop Azure compute solutions Practice Question
Your company runs a batch processing job on Azure Batch. The job processes large datasets and requires access to Azure Storage. You need to ensure that the compute nodes can securely access the storage account without exposing credentials. What should you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Managed identity for the Batch pool
Managed identities for Azure resources allow compute nodes to authenticate to Azure Storage without storing credentials. Option A is wrong because Azure AD service principals require managing credentials and are not the simplest approach for Batch compute nodes to access storage. Option B is wrong because storage account access keys are shared secrets that should not be exposed. Option D is wrong because shared access signatures (SAS) tokens can be exposed and need to be managed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure AD service principal
Why it's wrong here
Service principals require client secrets or certificates, which still need to be managed.
- ✗
Storage account access keys
Why it's wrong here
Access keys are long-lived shared secrets that must be stored securely and can be compromised.
- ✓
Managed identity for the Batch pool
Why this is correct
Assign a managed identity to the Batch pool to authenticate to Azure Storage without any secrets.
- ✗
Shared access signatures (SAS)
Why it's wrong here
SAS tokens grant time-limited access but still require distributing tokens to nodes.
Go deeper
Related to this question
About these practice questions
One of 881 original AZ-204 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.