Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam AZ-104 topic 4 question 6 discussion

Actual exam question from Microsoft's AZ-104
Question #: 6
Topic #: 4
[All AZ-104 Questions]

You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines.
You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.
What should you create to store the password?

  • A. an Azure Key Vault and an access policy
  • B. an Azure Storage account and an access policy
  • C. a Recovery Services vault and a backup policy
  • D. Azure Active Directory (AD) Identity Protection and an Azure policy
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
You can use a template that allows you to deploy a simple Windows VM by retrieving the password that is stored in a Key Vault. Therefore, the password is never put in plain text in the template parameter file.
Reference:
https://azure.microsoft.com/en-us/resources/templates/101-vm-secure-password/

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
fedztedz
Highly Voted 3 years ago
Correct. Answer is A using Azure Vault
upvoted 83 times
...
waterzhong
Highly Voted 2 years, 11 months ago
"adminPassword": { "reference": { "keyVault": { "id": "GEN-KEYVAULT-RESOURCE-ID" }, "secretName": "GEN-KEYVAULT-PASSWORD-SECRET-NAME" } }
upvoted 55 times
AThakor
3 months ago
This clarifies the answer, Thanks
upvoted 1 times
...
...
iamchoy
Most Recent 2 months, 3 weeks ago
Selected Answer: A
The correct answer is: A. an Azure Key Vault and an access policy Explanation: Azure Key Vault is a cloud service that safeguards encryption keys and secrets like certificates, connection strings, and passwords. When deploying resources through Azure Resource Manager templates, it's a best practice to store sensitive data like administrative passwords in Azure Key Vault rather than in the template itself. By referencing the Azure Key Vault in the ARM template, the password can be fetched securely during deployment. The access policy in Azure Key Vault defines what operations can be done on the secrets (like read or write) and who can perform these operations. Thus, the best way to securely store and reference an administrative password in an Azure Resource Manager template is by using Azure Key Vault and setting an appropriate access policy.
upvoted 1 times
...
CarlosMarin
3 months, 1 week ago
This question was in my exam on 31/08/2023.
upvoted 2 times
...
GohanF2
8 months, 1 week ago
answer is right. This question also appears on MS free assessment exam.
upvoted 3 times
...
UmbongoDrink
10 months ago
Selected Answer: A
A) "an Azure Key Vault and an access policy" Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/key-vault-parameter?tabs=azure-cli
upvoted 2 times
...
LalitMF
11 months, 1 week ago
Selected Answer: A
Azure key vault is the correct answer
upvoted 3 times
...
NaoVaz
1 year, 2 months ago
Selected Answer: A
A) "an Azure Key Vault and an access policy" Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/key-vault-parameter?tabs=azure-cli
upvoted 3 times
...
EmnCours
1 year, 3 months ago
Selected Answer: A
Correct Answer: A
upvoted 2 times
...
Nathia
1 year, 4 months ago
Selected Answer: A
Azure Key Value is used to store sensitive data like password, keys
upvoted 2 times
...
JacquesV
1 year, 4 months ago
In exam on 10Aug2022
upvoted 2 times
...
geeta28
1 year, 5 months ago
This came in June 25 2022 exam. Didn't pass :(
upvoted 4 times
CKRCKR
4 months, 2 weeks ago
Dont worry, try again
upvoted 1 times
...
...
Lazylinux
1 year, 5 months ago
Selected Answer: A
A is correct Azure Key Vault to store password and an access policy to control access to the vault
upvoted 5 times
...
manalshowaei
1 year, 6 months ago
Selected Answer: A
A. an Azure Key Vault and an access policy
upvoted 3 times
...
epomatti
1 year, 7 months ago
Selected Answer: A
Correct, it is A
upvoted 2 times
...
ajayasa
1 year, 8 months ago
this question was there on 16/03/2022 with same question and passed with 900 percent
upvoted 5 times
...
benvdw
1 year, 9 months ago
on exam 13/3/2022
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...