nerdexam
Microsoft

AZ-305 · Question #246

A team is planning on deploying Azure resources by using Resource Manager templates. The templates need to reference secrets that are stored in Azure Key vault. You need to ensure deployments can be…

The correct answer is C. Role Based access. The Microsoft documentation clearly gives the steps for this. One of them is to ensure the identity deploying the template has the right permissions. This can be done with the help of Role based…

Submitted by alyssa_d· Mar 6, 2026Design identity, governance, and monitoring solutions

Question

A team is planning on deploying Azure resources by using Resource Manager templates. The templates need to reference secrets that are stored in Azure Key vault. You need to ensure deployments can be made accordingly. Which of the following would you use to restrict access to the secrets in the key vault?

Exhibit

AZ-305 question #246 exhibit

Options

  • AAccess policies for the Key vault
  • BAn Azure policy
  • CRole Based access
  • DAdvanced access policy for the Key vault

How the community answered

(66 responses)
  • A
    5% (3)
  • B
    8% (5)
  • C
    74% (49)
  • D
    14% (9)

Explanation

The Microsoft documentation clearly gives the steps for this. One of them is to ensure the identity deploying the template has the right permissions. This can be done with the help of Role based https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-keyvault-

Topics

#Azure Key Vault#RBAC#secret access#ARM templates

Community Discussion

No community discussion yet for this question.

Full AZ-305 Practice