StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Application architecture

Practice question 305 of 400 · hard

An app reads App Configuration successfully but cannot resolve its Key Vault secret reference. Which two facts should the architect verify? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.The app can reach and resolve the Key Vault endpoint through the intended network path
  2. B.A config reference stores the plaintext secret and therefore never needs Key Vault access
  3. C.App Configuration read permission automatically grants secret read permission
  4. D.The app identity has appropriate secret retrieval authorization in Key Vault
  5. E.Feature flags are a substitute for Key Vault authorization
Show the answer and explanation

✓ Correct answers

  • The app can reach and resolve the Key Vault endpoint through the intended network path
  • The app identity has appropriate secret retrieval authorization in Key Vault

Secret references require both authorized Key Vault retrieval and a working network/DNS path. Configuration permissions are separate, feature flags do not authorize secrets, and a reference is not automatically an embedded plaintext value. Source guide: PDF page(s) 53.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.