nerdexam
Microsoft

AZ-500 · Question #597

You have an X.509 certificate named cert1 that is managed by an external partner named Partner1. You build a web app named Web1 that will be deployed by using Azure Pipelines. Web1 will be bound to…

The correct answer is D. an Azure key vault. For web apps deployed with Azure Pipelines, X.509 certificates should be stored securely in Azure Key Vault. Key Vault provides a centralized and secure location for managing secrets, including certificates, and integrates seamlessly with Azure services like App Service and…

Submitted by noor.lb· Mar 6, 2026Secure compute, storage, and databases

Question

You have an X.509 certificate named cert1 that is managed by an external partner named Partner1. You build a web app named Web1 that will be deployed by using Azure Pipelines. Web1 will be bound to cert1. You need to ensure that cert1 is available to Azure Pipelines. The solution must ensure that cert1 can only be updated by Partner1. Where should you store cert1?

Options

  • Aa variable group
  • Bthe Secure files library in Azure DevOps
  • Ca secure enclave
  • Dan Azure key vault

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    4% (1)
  • D
    83% (20)

Explanation

For web apps deployed with Azure Pipelines, X.509 certificates should be stored securely in Azure Key Vault. Key Vault provides a centralized and secure location for managing secrets, including certificates, and integrates seamlessly with Azure services like App Service and Azure https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice