AZ-305 · Question #196
Hotspot Question You have a resource group named RG1 that contains the objects shown in the following table. You need to configure permissions so that App1 can copy all the secrets from KV1 to KV2…
The correct answer is App1 requires the List permission to copy secrets from KV1. = Yes; App1 requires the Create permission to copy secrets to KV2. = Yes. To copy ALL secrets from KV1 to KV2, App1 needs the List permission on KV1 to enumerate/discover all secret names (Get alone only retrieves a specific secret if you already know its name, but cannot list all secrets). On the destination KV2, App1 needs the Create (or Set)…
Question
Exhibits
Answer Area
- App1 requires the List permission to copy secrets from KV1.Yes
- App1 requires the Create permission to copy secrets to KV2.Yes
Explanation
To copy ALL secrets from KV1 to KV2, App1 needs the List permission on KV1 to enumerate/discover all secret names (Get alone only retrieves a specific secret if you already know its name, but cannot list all secrets). On the destination KV2, App1 needs the Create (or Set) permission to write/create the secrets, as simply having Get on the source is insufficient for writing to the target vault. Both Yes answers are correct because List is required to iterate through all secrets in the source vault, and Create/Set is required to store those secrets in the destination vault.
Topics
Community Discussion
No community discussion yet for this question.