Practice question 421 of 498 · easy
An application must store a third-party secret that cannot yet be replaced with a secretless identity. Which service is the most direct fit?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Azure Key Vault with scoped permissions and lifecycle controls
Key Vault is designed for restricted secret management. WAF protects web requests, caching does not provide a secret lifecycle boundary, and plaintext source storage exposes the credential.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.