nerdexam
Microsoft

AZ-104 · Question #676

You have an Azure AD tenant named contoso.com. You have an Azure subscription that contains an Azure App Service web app named App1 and an Azure key vault named KV1. KV1 contains a wildcard certificat

Sign in or unlock AZ-104 to reveal the answer and full explanation for question #676. The question stem and answer options stay visible for context.

Submitted by naveen.iyer· Mar 4, 2026Deploy and manage Azure compute resources

Question

You have an Azure AD tenant named contoso.com. You have an Azure subscription that contains an Azure App Service web app named App1 and an Azure key vault named KV1. KV1 contains a wildcard certificate for contoso.com. You have a user named [email protected] that is assigned the Owner role for App1 and KV1. You need to configure App1 to use the wildcard certificate of KV1. What should you do first?

Options

  • ACreate an access policy for KV1 and assign the Microsoft Azure App Service principal to the
  • BAssign a managed user identity to App1.
  • CConfigure KV1 to use the role-based access control (RBAC) authorization system.
  • DCreate an access policy for KV1 and assign the policy to User1.

Unlock AZ-104 to see the answer

You've previewed enough free AZ-104 questions. Unlock AZ-104 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full AZ-104 Practice