AZ-400 · Question #587
Hotspot Question You have an Azure Pipelines pipeline that has the following definition. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each cor
The correct answer is The secrets in kv1 are available to CopyFiles@2. = Yes; The connection string is recorded in the log file. = No; The secrets in kv1 is available to AzureFunctionApp@2. = Yes. When an Azure Key Vault task is defined at the pipeline level (or before a stage/job), the secrets it retrieves are available as environment variables to all subsequent tasks within that scope, including both CopyFiles@2 and AzureFunctionApp@2. Azure Pipelines automatically masks
Question
Exhibits
Answer Area
- The secrets in kv1 are available to CopyFiles@2.Yes
- The connection string is recorded in the log file.No
- The secrets in kv1 is available to AzureFunctionApp@2.Yes
Explanation
When an Azure Key Vault task is defined at the pipeline level (or before a stage/job), the secrets it retrieves are available as environment variables to all subsequent tasks within that scope, including both CopyFiles@2 and AzureFunctionApp@2. Azure Pipelines automatically masks secret values retrieved from Key Vault in log output, replacing them with '***', which means the connection string is NOT recorded in plain text in the log file - it is redacted/masked to prevent accidental exposure.
Topics
Community Discussion
No community discussion yet for this question.

