nerdexam
Microsoft

AZ-120 · Question #33

You plan to deploy an SAP environment on Azure. You plan to store all SAP connection strings securely in Azure Key Vault without storing credentials on the Azure virtual machines that host SAP. What…

The correct answer is C. a Managed Service Identity (MSI). To reference a credential stored in Azure Key Vault, you need to: 1. Retrieve data factory managed identity 2. Grant the managed identity access to your Azure Key Vault 3. Create a linked service pointing to your Azure Key Vault. 4. Create data store linked service, inside…

Design and implement an infrastructure to support SAP workloads on Azure

Question

You plan to deploy an SAP environment on Azure. You plan to store all SAP connection strings securely in Azure Key Vault without storing credentials on the Azure virtual machines that host SAP. What should you configure to allow the virtual machines to access the key vault?

Options

  • AAzure Active Directory (Azure AD) Privilege Identity Manager (PIM)
  • Brole-based access control (RBAC)
  • Ca Managed Service Identity (MSI)
  • Dthe Custom Script Extension

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    70% (14)
  • D
    20% (4)

Explanation

To reference a credential stored in Azure Key Vault, you need to: 1. Retrieve data factory managed identity 2. Grant the managed identity access to your Azure Key Vault 3. Create a linked service pointing to your Azure Key Vault. 4. Create data store linked service, inside which reference the corresponding secret stored in key https://docs.microsoft.com/bs-latn-ba/azure/data-factory/store-credentials-in-key-vault

Topics

#Managed Service Identity#Azure Key Vault#identity management#credential security

Community Discussion

No community discussion yet for this question.

Full AZ-120 Practice