Exam SC-500 Topic 1 Question 219 Discussion

Explanation:

Variable1 is configured with the normal value property. A standard Azure Container Instances environment variable is available to processes running inside the container and its configured value is also exposed through the container resource configuration. Consequently, Variable1 can be accessed from inside container1 and from management interfaces such as the Azure portal . Microsoft Learn Variable2 is configured with secureValue , which Azure Container Instances provides specifically for sensitive values such as passwords, tokens, and application secrets. Microsoft states that environment variables configured using secureValue are not visible in the container ' s properties . When the resource is queried through management interfaces such as Azure CLI or the Azure portal, the secure variable ' s name can be shown, but its value is suppressed. Microsoft Learn The value is nevertheless injected into the container ' s runtime environment, so a process or interactive session inside container1 can access Variable2. Microsoft demonstrates this by entering the running container and reading the secure environment variable from the shell. Microsoft Learn This distinction protects secrets from exposure through the Azure management plane while still making them available to the workload that requires them. SC-500 includes security controls for Azure Container Instances under Secure compute.