DP-420 · Question #154
You have an Azure subscription that contains the resources shown in the following table. You need to store the account key of account1 in KV1. What should you use?
The correct answer is B. a secret. To securely store an Azure Cosmos DB account key within Azure Key Vault, you should use a secret.
Question
You have an Azure subscription that contains the resources shown in the following table. You need to store the account key of account1 in KV1. What should you use?
Options
- Aa key
- Ba secret
- Ca certificate
How the community answered
(26 responses)- A8% (2)
- B88% (23)
- C4% (1)
Why each option
To securely store an Azure Cosmos DB account key within Azure Key Vault, you should use a secret.
Azure Key Vault keys are cryptographic keys used for encryption, decryption, signing, and verification, not for storing arbitrary text like an account key.
Azure Key Vault secrets are designed for storing sensitive, textual data like API keys, connection strings, and passwords. An Azure Cosmos DB account key is a string used for authentication and fits the definition of a secret.
Azure Key Vault certificates are used for managing SSL/TLS certificates and their associated keys, not for storing simple account keys.
Concept tested: Azure Key Vault secret management
Source: https://learn.microsoft.com/azure/key-vault/secrets/about-secrets
Topics
Community Discussion
No community discussion yet for this question.