Managing Access to Azure Container Registry

What you'll be asked

1. Which Azure feature is the recommended way to authenticate to an Azure Container Registry (ACR) without managing credentials or storing secrets in your code?
2. You need to grant a CI/CD pipeline read-only access to pull images from an Azure Container Registry. Which Azure RBAC role should you assign to the service principal?
3. An organization requires that access to the Azure Container Registry must only originate from within their virtual network. Which feature should be enabled to achieve this?
4. When using a repository-scoped access token to provide granular access to a specific image repository, which property must be defined in the token's scope?
5. You have a Premium ACR and need to ensure that image pulls are restricted based on the client's network location while also preventing unauthorized access if a token is leaked. Which combination of controls provides the most robust defense-in-depth strategy?

Answers and explanations come after you submit.