A company wants separate vault administrators and applications that only retrieve secrets. Which authorization approach is recommended?

Choose the single best answer.

A.Use only Contributor and assume it always supplies secret-read data rights.
B.Share one administrator's credentials with all applications.
C.Give every application subscription Owner.
D.Azure RBAC with appropriate management and narrowly scoped vault data roles.

Show the answer and explanation

✓ Correct answer

Azure RBAC with appropriate management and narrowly scoped vault data roles.

Azure RBAC supports separation through distinct management and data roles, such as Key Vault Secrets User for suitable secret retrieval. Owner and shared administrator credentials are excessive. Contributor is a management role and is not a universal guarantee of secret retrieval; indirect escalation paths must also be controlled. Source: AZ-305 Study Guide.pdf, PDF page(s) 17.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.