Join the discussion
Question 7/12
The App Service has a system-assigned managed identity enabled. Identify the managed identity principal ID.
Correct Answer:
See the Answer in Explanation below.
Explanation:
b72a4c19-92f6-47f3-b3dd-9db5a31831d1
Detailed Solution:
Run:
az webapp identity show \
--name finance-reporting-api \
--resource-group rg-prod-apps-eastus \
--output json
Expected output:
{
" principalId " : " b72a4c19-92f6-47f3-b3dd-9db5a31831d1 " ,
" tenantId " : " 8f34c1de-1198-4c2a-b1a8-1eaa72f6e99a " ,
" type " : " SystemAssigned "
}
The principalId is the service principal object ID of the managed identity.
Microsoft documents that managed identities provide Azure-managed identities for applications and eliminate the need to manage application secrets directly.
Explanation:
b72a4c19-92f6-47f3-b3dd-9db5a31831d1
Detailed Solution:
Run:
az webapp identity show \
--name finance-reporting-api \
--resource-group rg-prod-apps-eastus \
--output json
Expected output:
{
" principalId " : " b72a4c19-92f6-47f3-b3dd-9db5a31831d1 " ,
" tenantId " : " 8f34c1de-1198-4c2a-b1a8-1eaa72f6e99a " ,
" type " : " SystemAssigned "
}
The principalId is the service principal object ID of the managed identity.
Microsoft documents that managed identities provide Azure-managed identities for applications and eliminate the need to manage application secrets directly.
Add Comments
- Other Question (12q)
- Q1. Using the managed identity principal ID discovered in the previous task, identify which Az...
- Q2. During App Service enumeration, you discover that the compromised user can read App Servic...
- Q3. Using a discovered SAS token with read/list permissions, enumerate blobs inside the sensit...
- Q4. Inside the public blob container, a file named backup-config.json contains service princip...
- Q5. You are reviewing Azure Activity Logs after a lab compromise. Which operation indicates th...
- Q6. With access to the Web App's Managed Identity, you can now query certain Azure Resources. ...
- Q7. The App Service has a system-assigned managed identity enabled. Identify the managed ident...
- Q8. Using the privileges of the previously compromised App Registration, explore the Azure env...
- Q9. ExcaliburCorp has recently migrated part of its infrastructure to Microsoft Azure. Shortly...
- Q10. You've uncovered valid credentials for another user in the previous step. Authenticate as ...
- Q11. Using the previously retrieved credentials, authenticate as the App Registration within th...
- Q12. During network reconnaissance of an Azure VM, you inspect its Network Security Group. Whic...
[×]
Download PDF File
Enter your email address to download TheSecOpsGroup.CCPenX-Az.v2026-09-13.q12.pdf