Microsoft AZ-400 Exam - Topic 5 Question 135 Discussion

Actual exam question for Microsoft's AZ-400 exam

Question #: 135
Topic #: 5

You have an Azure Resource Manager template that deploys a multi-tier application.

You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application.

What should you use?

Aan Azure Resource Manager parameter file

Ban Azure Storage table

Can Appsettings.json files

DAzure Key Vault

Ea Web.config file

Show Suggested Answer

Suggested Answer: D

When you need to pass a secure value (like a password) as a parameter during deployment, you can retrieve the value from an Azure Key Vault. You retrieve the value by referencing the key vault and secret in your parameter file. The value is never exposed because you only reference its key vault ID. The key vault can exist in a different subscription than the resource group you are deploying to.

by Colene at May 30, 2026, 08:55 AM

Limited Time Offer

25%

Off

Get Premium AZ-400 Questions as Interactive Web-Based Practice Test or PDF