Home › Azure AZ-204 › cloudcomputing › az204security › Which Azure feature lets a developer call `Defau…
Which Azure feature lets a developer call `DefaultAzureCredential` from the Azure SDK and have the SDK chain through multiple credential sources (env vars, CLI, MSI) until one works?
AStoring tokens in plain text files
BThe DefaultAzureCredential class in the Azure Identity SDK
CDisabling Entra ID entirely
DManually parsing JWT tokens
Answer & Solution
Correct answer: B. The DefaultAzureCredential class in the Azure Identity SDK
DefaultAzureCredential is the canonical "works locally and in production" credential chain — same code locally (dev creds, CLI) and in Azure (MSI). The other options are antipatterns.
Related questions
Which Azure feature continuously scans App Service / Function code for known vulnerabilitiWhich type of Microsoft Identity token does a client present to a downstream API to prove Which configuration lets an Azure Function access a SECRET stored in Key Vault via an App An Azure Function needs to read a secret from Key Vault on every cold start. What's the MOAn Azure Web App needs to authenticate users with Entra ID without writing OAuth code. WhiWhich Azure feature lets an admin grant a role assignment that's only ACTIVE for an approvWhich configuration gives an Azure VM, App Service, or Function App an identity to call KeWhich Azure service handles consumer/customer-facing identity (B2C) — sign-in for end user