SC-900 · Question #232
Which two actions can you perform by using Azure Key Vault? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
The correct answer is A. Store secrets. E. Store keys. Azure Key Vault is a cloud service designed to safeguard cryptographic keys, secrets, and certificates. Specifically: (A) Store secrets - Key Vault can securely store application secrets such as passwords, connection strings, and API keys, with access controlled via Azure RBAC…
Question
Which two actions can you perform by using Azure Key Vault? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Options
- AStore secrets.
- BStore Azure Resource Manager (ARM) templates.
- CImplement network security groups (NSGs).
- DImplement Azure DDoS Protection.
- EStore keys.
How the community answered
(59 responses)- A90% (53)
- B3% (2)
- C2% (1)
- D5% (3)
Explanation
Azure Key Vault is a cloud service designed to safeguard cryptographic keys, secrets, and certificates. Specifically: (A) Store secrets - Key Vault can securely store application secrets such as passwords, connection strings, and API keys, with access controlled via Azure RBAC and access policies. (E) Store keys - Key Vault manages cryptographic keys used for encryption operations, supporting both software-protected and HSM-protected keys. ARM templates (B) are stored in Azure storage accounts or template specs, not Key Vault. Network Security Groups (C) are a networking feature unrelated to Key Vault. Azure DDoS Protection (D) is a network protection service, also unrelated to Key Vault's purpose.
Topics
Community Discussion
No community discussion yet for this question.