nerdexam
MicrosoftMicrosoft

AZ-400 · Question #478

AZ-400 Question #478: Real Exam Question with Answer & Explanation

Sign in or unlock AZ-400 to reveal the answer and full explanation for question #478. The question stem and answer options stay visible for context.

Submitted by akirajp· Mar 6, 2026Develop a security and compliance plan

Question

You have an Azure key vault named KV1 and three web servers. You plan to deploy an app named App1 to the web servers. You need to ensure that App1 can retrieve a secret from KV1. The solution must meet the following requirements: - Minimize the number of permission grants required. - Follow the principle of least privilege. What should you include in the solution?

Options

  • Arole-based access control (RBAC) permission
  • Ba system-assigned managed identity
  • Ca user-assigned managed identity
  • Da service principal

Unlock AZ-400 to see the answer

You've previewed enough free AZ-400 questions. Unlock AZ-400 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full AZ-400 PracticeBrowse All AZ-400 Questions