nerdexam
Microsoft

AZ-400 · Question #178

You are deploying a server application that will run on a Server Core installation of Windows Server 2019. You create an Azure key vault and a secret. You need to use the key vault to secure API secre

The correct answer is B. Modify the application to access the key vault. C. Configure a Key Vault access policy. E. Deploy a virtual machine that uses a system-assigned managed identity.. BE: An app deployed to Azure can take advantage of Managed identities for Azure resources, which allows the app to authenticate with Azure Key Vault using Azure AD authentication without credentials (Application ID and Password/Client Secret) stored in the app. 1. Select Add Acce

Submitted by fatema_kw· Mar 6, 2026Develop a security and compliance plan

Question

You are deploying a server application that will run on a Server Core installation of Windows Server 2019. You create an Azure key vault and a secret. You need to use the key vault to secure API secrets for third-party integrations. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

  • AConfigure RBAC for the key vault.
  • BModify the application to access the key vault.
  • CConfigure a Key Vault access policy.
  • DDeploy an Azure Desired State Configuration (DSC) extension.
  • EDeploy a virtual machine that uses a system-assigned managed identity.

How the community answered

(36 responses)
  • A
    11% (4)
  • B
    69% (25)
  • D
    19% (7)

Explanation

BE: An app deployed to Azure can take advantage of Managed identities for Azure resources, which allows the app to authenticate with Azure Key Vault using Azure AD authentication without credentials (Application ID and Password/Client Secret) stored in the app. 1. Select Add Access Policy. 2. Open Secret permissions and provide the app with Get and List permissions. 3. Select Select principal and select the registered app by name. Select the Select button. 6. Deploy the app. https://docs.microsoft.com/en-us/aspnet/core/security/key-vault-configuration

Community Discussion

No community discussion yet for this question.

Full AZ-400 Practice