nerdexam
Microsoft

SC-300 · Question #396

Hotspot Question You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains two Azure key vaults named KV1 and KV2 that use Azure role-based access control (Azure

Sign in or unlock SC-300 to reveal the answer and full explanation for question #396. The question stem and answer options stay visible for context.

Submitted by rohit_dlh· Mar 6, 2026Implement access management for apps

Question

Hotspot Question You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains two Azure key vaults named KV1 and KV2 that use Azure role-based access control (Azure RBAC). The subscription contains the users shown in the following table. KV1 contains a secret named Secret1. KV2 contains a secret named Secret2. Which users can read the values of each secret? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:

Exhibit

SC-300 question #396 exhibit

Answer Area

  • User1 can read Secret1
  • User1 can read Secret2
  • User2 can read Secret1
  • User2 can read Secret2
  • User3 can read Secret1
  • User3 can read Secret2

Unlock SC-300 to see the answer

You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Azure RBAC#Key Vault#secret access#role scope inheritance
Full SC-300 Practice