Plan, implement, and monitor the integration of enterprise applications
Objective enterprise.application-integration sits in Plan and implement workload identities, which carries 22% of the Identity and Access Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.
Objective title verbatim from the official objectives. Microsoft Azure exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
An administrator registers an application in Microsoft Entra ID so it can automate deployments to an Azure resource group. Which type of security principal should receive an Azure RBAC role assignment to grant this access?
The concept
A role assignment requires a security principal, which can be a user, group, service principal, or managed identity, attached to a role definition at a scope.
Why this answer
When an application is registered in the directory, it is represented as a service principal, so the RBAC role assignment for that application's access must target its service principal object.
- Correct: registering an application creates a service principal object that represents it as a security principal.
- BA managed identity is created and managed automatically by Azure for a resource, not something produced by registering an application.
- CA user account represents an individual human identity, not an application requesting access.
- DA group represents a collection of users or other principals, not the application itself.
Now you: objective enterprise.application-integration questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
A CI/CD pipeline running in GitHub Actions needs to authenticate to Azure subscriptions to automate software deployment workflows. Which Microsoft Entra product secures this type of nonhuman identity?
Sample question 2 of 3
A DevOps team configures a GitHub Actions workflow that must authenticate to an Azure subscription to automate a deployment pipeline, without storing a long-lived secret in the workflow. Which Microsoft Entra product supplies the identity for this automated workflow?
Sample question 3 of 3
An independent software vendor adds single sign-on support to its product. Which benefit does the documentation attribute to that?
Full Identity and Access Admin question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.