Microsoft
AZ-305 · Question #60
You are designing an Azure resource deployment that will use Azure Resource Manager templates. The deployment will use Azure Key Vault to store secrets. You need to recommend a solution to meet the fo
Sign in or unlock AZ-305 to reveal the answer and full explanation for question #60. The question stem and answer options stay visible for context.
Submitted by katya_ua· Mar 6, 2026Design identity, governance, and monitoring solutions
Question
You are designing an Azure resource deployment that will use Azure Resource Manager templates. The deployment will use Azure Key Vault to store secrets. You need to recommend a solution to meet the following requirements: - Prevent the IT staff that will perform the deployment from retrieving the secrets directly from Key Vault. - Use the principle of least privilege. Which two actions should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- ACreate a Key Vault access policy that allows all get key permissions, get secret permissions, and
- BFrom Access policies in Key Vault, enable access to the Azure Resource Manager for template
- CCreate a Key Vault access policy that allows all list key permissions, list secret permissions, and
- DAssign the IT staff a custom role that includes the Microsoft.KeyVault/Vaults/Deploy/Action
- EAssign the Key Vault Contributor role to the IT staff.
Unlock AZ-305 to see the answer
You've previewed enough free AZ-305 questions. Unlock AZ-305 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.