Exam 70-486 topic 1 question 166 discussion

Actual exam question from Microsoft's 70-486

Question #: 166
Topic #: 1

DRAG DROP -
You are developing an ASP.NET Core web application that uses sensitive configuration data. You plan to develop the application locally and then deploy the application to a Microsoft Azure App Services Web App for testing and production.
You must securely store sensitive configuration data and be able to share the data across multiple projects.
You need to ensure that sensitive data is stored in local configuration files.
Which technologies should you implement? To answer, drag the appropriate technologies to the correct environments. Each technology may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/aspnet/core/security/app-secrets?view=aspnetcore-2.1&tabs=windows

by francis at Dec. 9, 2019, 7:23 p.m.

Comments

Submit Cancel

Gorilla

Highly Voted 5 years, 4 months ago

Nice catch. Then it sounds like aspnet_regiis instead od KeyVault

upvoted 6 times

arohh

4 years, 5 months ago

I still think answer is correct: "The Secret Manager tool hides implementation details, such as where and how the values are stored. You can use the tool without knowing these implementation details. The values are stored in a JSON file in the local machine's user profile folder:" https://docs.microsoft.com/en-us/aspnet/core/security/app-secrets?view=aspnetcore-5.0&tabs=windows#how-the-secret-manager-tool-works

upvoted 2 times

...

this_is_sparta

Most Recent 5 years, 3 months ago

The Azure Key Vault stores only the keys, not the data. So Azure KV as answere is correct.

upvoted 4 times

natsk8freak

5 years, 2 months ago

Additionally... when reading from AzureKeyVault, the keys are loaded into the application configuration.

upvoted 2 times

...

francis

5 years, 5 months ago

how about "You need to ensure that sensitive data is stored in local configuration files." - when using Azure KV, this isn't local configuration files, is it?