Q22 Key Vault Domain 4 · 20–25% of exam

Which authentication flow does DefaultAzureCredential use when running in Azure App Service or Azure Functions?

  1. A Interactive browser flow
  2. B Client secret from environment variable
  3. C Managed identity (system or user-assigned) (correct answer)
  4. D Azure CLI credentials

Shortcut: DefaultAzureCredential tries multiple auth methods in order. In Azure App Service/Functions, it uses the managed identity endpoint (IMDS), transparently authenticating with the service's assigned identity.