MENU
You have an Azure Resource Manager template that deploys a multi-tier application.
You need to prevent the user who performs the deployment from viewing the account credentials and connection strings used by the application.
What should you use?
Suggested Answer: D
Get Premium AZ-400 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
When you need to pass a secure value (like a password) as a parameter during deployment, you can retrieve the value from an Azure Key Vault. You retrieve the value by referencing the key vault and secret in your parameter file. The value is never exposed because you only reference its key vault ID. The key vault can exist in a different subscription than the resource group you are deploying to.
17 comments · newest first
ME
Merlyn
1 month ago
D) Azure Key Vault is designed for this purpose.
EL
Elina
1 month ago
C) Appsettings.json is not secure enough for credentials.
LI
Ling
1 month ago
B) Azure Storage table isn't meant for sensitive info.
SA
Samira
2 months ago
I feel like using Azure Key Vault is a best practice.
BE
Bernadine
2 months ago
D) is definitely more secure for credentials.
RO
Roslyn
2 months ago
A) an Azure Resource Manager parameter file could work too, but not as secure.
MA
Maryann
2 months ago
Agreed! It keeps secrets safe.
CA
Cassie
2 months ago
I think D) Azure Key Vault is the best choice.
PH
Phuong
3 months ago
I agree with Jeannetta, Key Vault is the way to go!
SA
Samira
3 months ago
No way, C) Appsettings.json is not secure enough for this.
TA
Tamesha
3 months ago
Wait, can you really hide credentials with Key Vault? Sounds too good to be true!
LO
Lorenza
3 months ago
I think A) an Azure Resource Manager parameter file could work too, but not as secure.
JE
Jeannetta
3 months ago
Definitely go with D) Azure Key Vault. It's the best for secrets management.
CL
Cletus
3 months ago
I’m a bit confused about the Appsettings.json file. Isn’t that just for app settings? I don’t think it would keep credentials hidden.
GE
Geraldine
4 months ago
I feel like I’ve seen a similar question before, and Key Vault was the right answer there too. It really seems like the best option.
DI
Dierdre
4 months ago
I’m not entirely sure, but I remember something about parameter files being used for configurations. Could they help with this?
LE
Leonardo
4 months ago
I think using Azure Key Vault makes the most sense here since it’s designed for securely storing secrets like credentials.