nerdexam
Microsoft

DP-420 · Question #154

You have an Azure subscription that contains the resources shown in the following table. You need to store the account key of account1 in KV1. What should you use?

The correct answer is B. a secret. To securely store an Azure Cosmos DB account key within Azure Key Vault, you should use a secret.

Integrate an Azure Cosmos DB solution

Question

You have an Azure subscription that contains the resources shown in the following table. You need to store the account key of account1 in KV1. What should you use?

Options

  • Aa key
  • Ba secret
  • Ca certificate

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    88% (23)
  • C
    4% (1)

Why each option

To securely store an Azure Cosmos DB account key within Azure Key Vault, you should use a secret.

Aa key

Azure Key Vault keys are cryptographic keys used for encryption, decryption, signing, and verification, not for storing arbitrary text like an account key.

Ba secretCorrect

Azure Key Vault secrets are designed for storing sensitive, textual data like API keys, connection strings, and passwords. An Azure Cosmos DB account key is a string used for authentication and fits the definition of a secret.

Ca certificate

Azure Key Vault certificates are used for managing SSL/TLS certificates and their associated keys, not for storing simple account keys.

Concept tested: Azure Key Vault secret management

Source: https://learn.microsoft.com/azure/key-vault/secrets/about-secrets

Topics

#Azure Key Vault#Secrets Management#Security#Account Keys

Community Discussion

No community discussion yet for this question.

Full DP-420 Practice