nerdexam
MicrosoftMicrosoft

AZ-500 · Question #426

AZ-500 Question #426: Real Exam Question with Answer & Explanation

Sign in or unlock AZ-500 to reveal the answer and full explanation for question #426. The question stem and answer options stay visible for context.

Submitted by stefanr· Mar 6, 2026

Question

You have an Azure subscription that contains a managed identity named Identity1 and the Azure key vaults shown in the following table. KeyVault1 contains an access policy that grants Identity1 the following key permissions: - Get - List - Wrap - Unwrap You need to provide Identity1 with the same permissions for KeyVault2. The solution must use the principle of least privilege. Which role should you assign to Identity1?

Options

  • AKey Vault Crypto Service Encryption User
  • BKey Vault Crypto User
  • CKey Vault Reader
  • DKey Vault Crypto Officer

Unlock AZ-500 to see the answer

You've previewed enough free AZ-500 questions. Unlock AZ-500 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full AZ-500 PracticeBrowse All AZ-500 Questions