Exam AZ-400 topic 4 question 20 discussion

C. Create a variable group in Project1.

C - is the right one https://docs.microsoft.com/en-us/azure/devops/pipelines/library/variable-groups?view=azure-devops&tabs=yaml#link-secrets-from-an-azure-key-vault

C. Create a variable group in Project1.

C. Create a variable group

Variable groups are specifically designed to store and manage sensitive information like Key Vault secrets within Azure DevOps. They offer several advantages: Centralized management: You can store and manage all your secrets in one place, making them easy to access and update across different pipelines within the project. Security: Variable groups offer security features like access control, which allows you to control who can access and modify the stored secrets. Integration with pipelines: You can easily reference secrets stored in variable groups within your build pipelines using dedicated tasks.

in the question says you provision an azure key vault and it means all needed configurations were applied to it. so according with this lab the most accurate answer is C. Create a variable group in Project1 https://microsoftlearning.github.io/AZ400-DesigningandImplementingMicrosoftDevOpsSolutions/Instructions/Labs/AZ400_M05_L10_Integrating_Azure_Key_Vault_with_Azure_DevOps.html

Agree with selected answer

C. Create a variable group in Project1. To reference Keyvault1 secrets in a build pipeline, you need to create a variablegroup. Azure DevOps variable groups can link to Azure Key Vault.

As others have said, link secrets from KV

Create a variable group in Project1 . Creating variable group is current. We need no do change anything at organisation contoso level

https://www.examtopics.com/exams/microsoft/az-400/view/12/ Q23 also says the variable group is the answer.

C. Create a variable group in Project1

C I just check : Security policies ib organization settings cannot solve KV access.

D It Says wht you do FIRST without givind access to List KV secret to SP of Devops , you wont be able to read an set a variable

I chose C when I sat on this exam, and I passed :)

C is correct answer. Why D is not correct? To access AKV from build pipeline, we have to define access policy at Azure Key Vault level. D is saying configure security policy of Contoso project which is not correct.

Answer is C https://docs.microsoft.com/en-us/azure/devops/pipelines/library/variable-groups?view=azure-devops&tabs=yaml "Variable groups store values and secrets that you might want to be passed into a YAML pipeline or make available across multiple pipelines. You can share and use variable groups in multiple pipelines in the same project." "Link an existing Azure key vault to a variable group and map selective vault secrets to the variable group."