Designing and Implementing Microsoft DevOps Solutions AZ-400 — Topic 4 Question 134

Question

You are deploying a server application that will run on a Server Core installation of Windows Server 2019. You create an Azure key vault and a secret. You need to use the key vault to secure API secrets for third-party integrations. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Accepted Answer

Correct answer: A, B, E. The correct answer is A, B, E. Option A: Configure RBAC for the key vault. Option B: Modify the application to access the key vault. Option E: Deploy a virtual machine that uses a system-assigned managed identity. An Azure Virtual Machine provides full control of the OS when you need to run custom or legacy workloads. A Managed Identity lets Azure resources authenticate to services without storing credentials. Azure Key Vault securely stores and manages secrets, keys, and certificates with access policies.

Designing and Implementing Microsoft DevOps Solutions AZ-400 — Question 134