ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam
Go to Exam

Exam AZ-303 topic 2 question 45 discussion

Actual exam question from Microsoft's AZ-303
Question #: 45
Topic #: 2
[All AZ-303 Questions]

You have an Azure key vault named KV1.
You need to ensure that applications can use KV1 to provision certificates automatically from an external certification authority (CA).
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. From KV1, create a certificate issuer resource.
  • B. Obtain the CA account credentials.
  • C. Obtain the root CA certificate.
  • D. From KV1, create a certificate signing request (CSR).
  • E. From KV1, create a private key,
Show Suggested Answer Hide Answer
Suggested Answer: CD 🗳️
C: Obtain the root CA certificate (step 4 in the picture below)
D: From KV1, create a certificate signing request (CSR) (step 2 in the picture below)
Note:
Creating a certificate with a CA not partnered with Key Vault
This method allows working with other CAs than Key Vault's partnered providers, meaning your organization can work with a CA of its choice.

The following step descriptions correspond to the green lettered steps in the preceding diagram.
1. In the diagram above, your application is creating a certificate, which internally begins by creating a key in your key vault.
2. Key Vault returns to your application a Certificate Signing Request (CSR).
3. Your application passes the CSR to your chosen CA.
4. Your chosen CA responds with an X509 Certificate.
5. Your application completes the new certificate creation with a merger of the X509 Certificate from your CA.
Reference:
https://docs.microsoft.com/en-us/azure/key-vault/certificates/certificate-scenarios
by snobrega at Jan. 2, 2021, 9:53 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Deepbond
Highly Voted 4 years, 5 months ago
I think correct answers should be A and B the question is what should you do (not the application), moreover, it doesn't say that CA is not partnered with KeyVault. First you need to obtain the CA account credentials and then create a certificate issuer resource as one time setup for applications/users to generate external certificates.
upvoted 50 times
AnonymousJhb
4 years, 2 months ago
As per MS url. MS likes to drink their own cool aid. Follow the link walkthru. https://docs.microsoft.com/en-us/azure/key-vault/certificates/how-to-integrate-certificate-authority
upvoted 4 times
vish9
3 years, 10 months ago
It should be A and B as per this Microsoft document https://docs.microsoft.com/en-us/azure/key-vault/certificates/certificate-scenarios
upvoted 2 times
...
...
...
snobrega
Highly Voted 4 years, 5 months ago
Shouldn't be A and B?
upvoted 14 times
...
itvinoth83
Most Recent 3 years, 2 months ago
Appeared in exam on 28-03-2022
upvoted 1 times
...
sandeepmalik
3 years, 2 months ago
In today's exam. Score 900+ Correct answer. AB
upvoted 1 times
...
kanweng
3 years, 3 months ago
from app developer prospective, internal CA (corporate CA, non integrated CA), external CA =public CA. the request is 'application automatically create certificate', D, E is not (manually). C, your corporate security team will never give your the ROOT CA with private key /password allow you to sign a cert, if they give you the Root CA(that is the public key, you will not able to sign a cert). Therefore, A, B Creating a certificate with a CA partnered with Key Vault https://docs.microsoft.com/en-us/azure/key-vault/certificates/certificate-scenarios application polls, in a loop and wait process,
upvoted 1 times
...
KemalM
3 years, 3 months ago
Selected Answer: AB
Create a certificate issuer resource and obtain CA account credentials
upvoted 1 times
...
shree178
3 years, 3 months ago
On exam today 19-2-2022.. Passed with 871.
upvoted 1 times
...
nd78
3 years, 4 months ago
on Exam today 21st Jan, 2022
upvoted 1 times
...
Dawn7
3 years, 5 months ago
Selected Answer: AB
I think A&B are correct
upvoted 1 times
...
ChrisG1454
3 years, 5 months ago
Maybe the keyword in the question is “external”. The examiner’s and/or MS viewpoint is a CA that is not “Partner” is considered as “external”. l read and scanned through MS Docs KeyVault scenarios to see if a non-partner (third-party) is classified as “external”.
upvoted 1 times
...
tomatosis
3 years, 5 months ago
On exam 23 Dec 2021, I chose A&B but not sure if it is correct or not.
upvoted 1 times
...
quantumray
3 years, 6 months ago
Question appeared On AZ-303 exam on 08/12/2021 - 49 questions, 4Q - Fabrikan case study
upvoted 1 times
...
ScubaDiver123456
3 years, 6 months ago
The answer should B, A, D in this order. You do not create a private key for the certificate (the key vault does that for you and never displays it) and there is no need for a root CA certificate (that will come back from the CA when the certificate is issued) You can see this really good tutorial of an "application" (azure cli commands) going through all the stages to generate a certificate https://samcogan.com/create-azure-key-vault-certificates-using-3rd-party-certificate-authorities/
upvoted 1 times
...
Dpejic
3 years, 6 months ago
On exam today 22/11/21 Score 839
upvoted 2 times
...
edmacoar123
3 years, 6 months ago
On exam today 19/11/21. I´m not sure what is the correct answer but I slect B and D. Score 860.
upvoted 3 times
...
donathon
3 years, 7 months ago
AB. I think the question is asking how to setup which AB is the first 2 step. It did not ask about how it will work after the setup is completed.
upvoted 2 times
...
sujitwarrier11
3 years, 7 months ago
I think the given answer is correct. External CA would mean a non-partnered CA. which would mean that the answer aand explanation is correct.
upvoted 4 times
MayilKannan
3 years, 5 months ago
yes, its an external CA it must be non-partnered CA. https://docs.microsoft.com/en-us/azure/key-vault/certificates/certificate-scenarios
upvoted 1 times
...
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel