nerdexam
Microsoft

AZ-400 · Question #587

Hotspot Question You have an Azure Pipelines pipeline that has the following definition. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each cor

The correct answer is The secrets in kv1 are available to CopyFiles@2. = Yes; The connection string is recorded in the log file. = No; The secrets in kv1 is available to AzureFunctionApp@2. = Yes. When an Azure Key Vault task is defined at the pipeline level (or before a stage/job), the secrets it retrieves are available as environment variables to all subsequent tasks within that scope, including both CopyFiles@2 and AzureFunctionApp@2. Azure Pipelines automatically masks

Submitted by skyler.x· Mar 6, 2026Implement security and validate code bases for compliance - specifically managing secrets, credentials, and sensitive configuration in CI/CD pipelines using Azure Key Vault integration with Azure DevOps Pipelines

Question

Hotspot Question You have an Azure Pipelines pipeline that has the following definition. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibits

AZ-400 question #587 exhibit 1
AZ-400 question #587 exhibit 2

Answer Area

  • The secrets in kv1 are available to CopyFiles@2.Yes
  • The connection string is recorded in the log file.No
  • The secrets in kv1 is available to AzureFunctionApp@2.Yes

Explanation

When an Azure Key Vault task is defined at the pipeline level (or before a stage/job), the secrets it retrieves are available as environment variables to all subsequent tasks within that scope, including both CopyFiles@2 and AzureFunctionApp@2. Azure Pipelines automatically masks secret values retrieved from Key Vault in log output, replacing them with '***', which means the connection string is NOT recorded in plain text in the log file - it is redacted/masked to prevent accidental exposure.

Topics

#Azure Key Vault#Azure Pipelines#Secret Management#Pipeline Variables

Community Discussion

No community discussion yet for this question.

Full AZ-400 Practice