StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Integrated architecture scenarios · Identity and access · Application architecture

Practice question 389 of 400 · medium

A managed application has feature flags, unavoidable third-party credentials, and access to Azure data services. Which two choices best separate these needs? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Store secrets in the application image to avoid runtime permissions
  2. B.Use a shared permanent Owner account as the application identity
  3. C.App Configuration for nonsecret settings and feature flags
  4. D.Key Vault for unavoidable secrets and managed identity where Azure access supports it
  5. E.Put every credential into feature-flag descriptions
Show the answer and explanation

✓ Correct answers

  • App Configuration for nonsecret settings and feature flags
  • Key Vault for unavoidable secrets and managed identity where Azure access supports it

App Configuration suits nonsecret settings; Key Vault suits secrets; managed identity can eliminate supported stored Azure credentials. Flags, source images, and shared permanent high privilege are inappropriate secret or identity designs. Source guide: PDF page(s) 65.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.