Microsoft
AZ-204 · Question #484
You develop and deploy an Azure App Service web app named App1. You create a new Azure Key Vault named Vault1. You import several API keys, passwords, certificates, and cryptographic keys into Vault1.
The correct answer is D. Assign a managed identity to App1.. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/service-accounts- managed-identities
Submitted by jaden.t· Mar 30, 2026Implement Azure security
Question
You develop and deploy an Azure App Service web app named App1. You create a new Azure Key Vault named Vault1. You import several API keys, passwords, certificates, and cryptographic keys into Vault1. You need to grant App1 access to Vault1 and automatically rotate credentials. Credentials must not be stored in code. What should you do?
Options
- AEnable App Service authentication for Appl. Assign a custom RBAC role to Vault1.
- BAdd a TLS/SSL binding to App1.
- CUpload a self-signed client certificate to Vault1. Update App1 to use the client certificate.
- DAssign a managed identity to App1.
How the community answered
(29 responses)- A3% (1)
- B3% (1)
- C14% (4)
- D79% (23)
Explanation
https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/service-accounts- managed-identities
Topics
#managed identity#Azure Key Vault#App Service#credential management
Community Discussion
No community discussion yet for this question.