Microsoft Certified Azure Developer Associate · Free Practice Question Medium
Question 9
You are a developer for Acme Inc. You are deploying an Azure App Service, and would like to store the application secrets in Azure Key Vault. You would not like to store any user id/passwords at all inside your application. Using what method can you assign the application the permission to read the secrets from the vault, without having to store any type of authentication credentials in code?
- A System-assigned Managed Identity, User-Assigned Managed Identity
- B Private Link
- C TLS/SSL Certificate
- D TLS mutual authentication
Reveal correct answer
Correct answer: A
Explanation
Azure Key Vault is a service that provides centralized secrets management, with full control over access policies and audit history. In order to read secrets from Key Vault, you need to have a vault created and give your app permission to access it. You must create a managed identity and assign it permissions to read the vault, or you can use a user-assigned identity. Refer to Microsoft Doc: https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=dotnetDiscussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
