Exam AZ-120 topic 3 question 6 discussion

Actual exam question from Microsoft's AZ-120

Question #: 6
Topic #: 3

You plan to deploy an SAP environment on Azure.
You plan to store all SAP connection strings securely in Azure Key Vault without storing credentials on the Azure virtual machines that host SAP.
What should you configure to allow the virtual machines to access the key vault?

A. Azure Active Directory (Azure AD) Privilege Identity Manager (PIM)
B. role-based access control (RBAC)
C. a Managed Service Identity (MSI)
D. the Custom Script Extension

Show Suggested Answer

Suggested Answer: C 🗳️

by Bhagirathi at Dec. 31, 2020, 8:01 a.m.

Comments

Submit Cancel

kevino81

10 months, 1 week ago

Selected Answer: C

MSI is the recommended way to allow Azure resources like virtual machines to securely access Azure Key Vault without storing credentials on the VMs

upvoted 1 times

...

AWSAZ0

1 year, 7 months ago

Selected Answer: C

Azure key vault can be accessed using a Managed Identity. Azure AD and PIM - No as a managed identity get stored in Azure AD, and the PIM security wasn't required in the question. RBAC, wrong. D. the Custom Script Extension - Not required

upvoted 2 times

...