Q23 PostgreSQL Domain 2 · 25–30% of exam Priority · Real Exam

How should an application authenticate to Flexible Server without storing a password?

  1. A Store the password in Key Vault
  2. B Use Microsoft Entra ID authentication with a managed identity token as the password (correct answer)
  3. C Use certificate pinning
  4. D Disable SSL and use trust authentication

Shortcut: Entra ID authentication lets the app acquire an access token with its managed identity and present it as the password, removing stored credentials entirely.