You have an Azure Resource Manager template that deploys a multi-tier application. You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application. What should you use?
The correct answer is:
A. Azure Key Vault
Explanation:
Azure Key Vault is designed to securely store and manage sensitive information such as secrets, keys, and certificates. By integrating Azure Key Vault with an Azure Resource Manager (ARM) template:
Credentials and connection strings can be stored securely in Key Vault.
The ARM template can reference the secrets stored in Key Vault without exposing them to the user performing the deployment.
This approach adheres to security best practices by keeping sensitive data out of templates or parameter files.
A is the answer.
https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/key-vault-parameter?tabs=azure-cli
Instead of putting a secure value (like a password) directly in your template or parameter file, you can retrieve the value from an Azure Key Vault during a deployment. You retrieve the value by referencing the key vault and secret in your parameter file. The value is never exposed because you only reference its key vault ID.
This section is not available anymore. Please use the main Exam Page.AZ-400 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
msalvatori
Highly Voted 4 years, 11 months agonikolayivanov
Most Recent 5 months, 1 week ago507101b
10 months, 3 weeks agoWH16
1 year, 9 months agoyana_b
1 year, 10 months agocatfood
1 year, 11 months agozellck
2 years agosurensaluka
2 years, 4 months agosyu31svc
2 years, 11 months agoGovcomm
2 years, 11 months agoMcelona
3 years agoUnknowMan
3 years, 1 month agordemontis
3 years, 3 months agofrutos46
3 years, 7 months agodroy89
3 years, 11 months agoRKS
4 years, 4 months agosamgoomer
4 years, 5 months agod0bermannn
3 years, 9 months ago