nerdexam
Microsoft

AZ-500 · Question #59

Drag and Drop Question You have an Azure subscription named Sub1 that contains an Azure Storage account named Contosostorage1 and an Azure key vault named Contosokeyvault1. You plan to create an…

The correct answer is Create an Azure Automation account.; Import PowerShell modules to the Azure Automation account.; Create a connection resource in the Azure Automation account. To implement an Azure Automation runbook that rotates storage keys and stores them in Key Vault, you must first create an Azure Automation account (the foundational resource), then import the necessary PowerShell modules (such as Az.Accounts, Az.KeyVault, and Az.Storage) so the…

Submitted by olafpl· Mar 6, 2026Implement and manage identity and access / Configure security for storage and key management (AZ-104 / SC-900 / AZ-500 - Managing Azure Automation and Key Vault integration)

Question

Drag and Drop Question You have an Azure subscription named Sub1 that contains an Azure Storage account named Contosostorage1 and an Azure key vault named Contosokeyvault1. You plan to create an Azure Automation runbook that will rotate the keys of Contosostorage1 and store them in Contosokeyvault1. You need to implement prerequisites to ensure that you can implement the runbook. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:

Exhibit

AZ-500 question #59 exhibit

Answer Area

Drag items

Run Set-AzureRmKeyVaultAccessPolicyCreate an Azure Automation account.Import PowerShell modules to the Azure Automation account.Create a user-assigned managed identityCreate a connection resource in the Azure Automation account.

Correct arrangement

  • Create an Azure Automation account.
  • Import PowerShell modules to the Azure Automation account.
  • Create a connection resource in the Azure Automation account.

Explanation

To implement an Azure Automation runbook that rotates storage keys and stores them in Key Vault, you must first create an Azure Automation account (the foundational resource), then import the necessary PowerShell modules (such as Az.Accounts, Az.KeyVault, and Az.Storage) so the runbook has the cmdlets it needs, and finally create a connection resource in the Automation account so the runbook can authenticate to Azure and interact with the target resources. These three steps establish the complete prerequisite infrastructure in the correct dependency order.

Topics

#Azure Automation#Key Vault#Storage Account Key Rotation#Runbook Prerequisites

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice