SC-200 · Question #21
You receive an alert from Azure Defender for Key Vault. You discover that the alert is generated from multiple suspicious IP addresses. You need to reduce the potential of Key Vault secrets being…
The correct answer is B. Enable the Key Vault firewall. Enabling the Key Vault firewall immediately restricts access to only explicitly allowed IP ranges, virtual networks, or trusted Microsoft services. This is the fastest control to activate and blocks the suspicious IP addresses without revoking permissions for legitimate users…
Question
You receive an alert from Azure Defender for Key Vault. You discover that the alert is generated from multiple suspicious IP addresses. You need to reduce the potential of Key Vault secrets being leaked while you investigate the issue. The solution must be implemented as soon as possible and must minimize the impact on legitimate users. What should you do first?
Options
- AModify the access control settings for the key vault.
- BEnable the Key Vault firewall.
- CCreate an application security group.
- DModify the access policy for the key vault.
How the community answered
(27 responses)- A7% (2)
- B81% (22)
- C4% (1)
- D7% (2)
Explanation
Enabling the Key Vault firewall immediately restricts access to only explicitly allowed IP ranges, virtual networks, or trusted Microsoft services. This is the fastest control to activate and blocks the suspicious IP addresses without revoking permissions for legitimate users who access from approved networks. Modifying access policies or access control (A/D) revokes permissions at the identity layer but does not block network-level access and is slower to enumerate safely. An application security group (C) applies to VM-level networking, not Key Vault directly.
Topics
Community Discussion
No community discussion yet for this question.