nerdexam
Microsoft

SC-900 · Question #232

Which two actions can you perform by using Azure Key Vault? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

The correct answer is A. Store secrets. E. Store keys. Azure Key Vault is a cloud service designed to safeguard cryptographic keys, secrets, and certificates. Specifically: (A) Store secrets - Key Vault can securely store application secrets such as passwords, connection strings, and API keys, with access controlled via Azure RBAC…

Submitted by yuriko_h· Apr 18, 2026Describe the capabilities of Microsoft security solutions

Question

Which two actions can you perform by using Azure Key Vault? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options

  • AStore secrets.
  • BStore Azure Resource Manager (ARM) templates.
  • CImplement network security groups (NSGs).
  • DImplement Azure DDoS Protection.
  • EStore keys.

How the community answered

(59 responses)
  • A
    90% (53)
  • B
    3% (2)
  • C
    2% (1)
  • D
    5% (3)

Explanation

Azure Key Vault is a cloud service designed to safeguard cryptographic keys, secrets, and certificates. Specifically: (A) Store secrets - Key Vault can securely store application secrets such as passwords, connection strings, and API keys, with access controlled via Azure RBAC and access policies. (E) Store keys - Key Vault manages cryptographic keys used for encryption operations, supporting both software-protected and HSM-protected keys. ARM templates (B) are stored in Azure storage accounts or template specs, not Key Vault. Network Security Groups (C) are a networking feature unrelated to Key Vault. Azure DDoS Protection (D) is a network protection service, also unrelated to Key Vault's purpose.

Topics

#Azure Key Vault#Secrets Management#Key Management

Community Discussion

No community discussion yet for this question.

Full SC-900 Practice