AZ-500 · Question #383
Hotspot Question You have an Azure subscription that contains an Azure key vault. The role assignments for the key vault are shown in the following exhibit. Use the drop-down menus to select the…
The correct answer is Only User2 can create keys in the key vault. = Yes; Only User3 can create secrets in the key vault. = Yes. In Azure Key Vault, the Key Vault Administrator role has full access to all key vault operations including keys, secrets, and certificates. The Key Vault Crypto Officer role has permissions specifically to manage keys (create, delete, update keys) but NOT secrets or…
Question
Exhibits
Answer Area
- Only User2 can create keys in the key vault.Yes
- Only User3 can create secrets in the key vault.Yes
Explanation
In Azure Key Vault, the Key Vault Administrator role has full access to all key vault operations including keys, secrets, and certificates. The Key Vault Crypto Officer role has permissions specifically to manage keys (create, delete, update keys) but NOT secrets or certificates. The Key Vault Secrets Officer role has permissions specifically to manage secrets but NOT keys or certificates. Based on the exhibit, User2 holds the Key Vault Crypto Officer role (allowing key creation) and User3 holds the Key Vault Secrets Officer role (allowing secret creation), making both statements 'Yes' - only User2 can create keys and only User3 can create secrets among the listed users.
Topics
Community Discussion
No community discussion yet for this question.