AZ104-Q: deploy a private container image
A Container App must pull an image from a private Azure Container Registry without embedding registry credentials in configuration. What should the team prefer?
- A) Make the registry public.
- B) Grant an appropriate managed identity pull permission on the registry. ✓
- C) Store the registry administrator password in source control.
- D) Copy the image manually to every VM. Answer: B. Managed identity plus least-privilege registry authorization avoids a stored registry secret. Why not the others: Public access, source-controlled passwords, and manual copies increase risk or operational cost.