StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Identity and access

Practice question 67 of 400 · medium

An App Service managed identity must retrieve one Key Vault secret. Which two design steps are necessary? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Assume identity enablement removes Key Vault firewall requirements.
  2. B.Grant subscription Owner merely to obtain a token.
  3. C.Ensure token audience, network access, and DNS allow the call.
  4. D.Store the secret in an application resource tag instead.
  5. E.Grant an appropriate Key Vault data permission at a suitable scope.
Show the answer and explanation

✓ Correct answers

  • Ensure token audience, network access, and DNS allow the call.
  • Grant an appropriate Key Vault data permission at a suitable scope.

Managed identity provides authentication, but the vault must authorize the operation and the service must be reachable with the correct token audience. Owner is excessive for one secret, identity does not bypass network policy, and tags are unsuitable plaintext secret storage. Source: AZ-305 Study Guide.pdf, PDF page(s) 15.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.