Microsoft
AZ-500 · Question #597
You have an X.509 certificate named cert1 that is managed by an external partner named Partner1. You build a web app named Web1 that will be deployed by using Azure Pipelines. Web1 will be bound to…
The correct answer is D. an Azure key vault. For web apps deployed with Azure Pipelines, X.509 certificates should be stored securely in Azure Key Vault. Key Vault provides a centralized and secure location for managing secrets, including certificates, and integrates seamlessly with Azure services like App Service and…
Submitted by noor.lb· Mar 6, 2026Secure compute, storage, and databases
Question
You have an X.509 certificate named cert1 that is managed by an external partner named Partner1. You build a web app named Web1 that will be deployed by using Azure Pipelines. Web1 will be bound to cert1. You need to ensure that cert1 is available to Azure Pipelines. The solution must ensure that cert1 can only be updated by Partner1. Where should you store cert1?
Options
- Aa variable group
- Bthe Secure files library in Azure DevOps
- Ca secure enclave
- Dan Azure key vault
How the community answered
(24 responses)- A4% (1)
- B8% (2)
- C4% (1)
- D83% (20)
Explanation
For web apps deployed with Azure Pipelines, X.509 certificates should be stored securely in Azure Key Vault. Key Vault provides a centralized and secure location for managing secrets, including certificates, and integrates seamlessly with Azure services like App Service and Azure https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate
Community Discussion
No community discussion yet for this question.