Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft DP-420 Exam - Topic 3 Question 71 Discussion

You plan to create an Azure Cosmos DB Core (SQL) API account that will use customer-managed keys stored in Azure Key Vault.You need to configure an access policy in Key Vault to allow Azure Cosmos DB access to the keys.Which three permissions should you enable in the access policy? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
A) Wrap Key and B) Get and G) Unwrap Key
C) List
D) Update
E) Sign
F) Verify

Microsoft DP-420 Exam - Topic 3 Question 71 Discussion

Actual exam question for Microsoft's DP-420 exam
Question #: 71
Topic #: 3
[All DP-420 Questions]

You plan to create an Azure Cosmos DB Core (SQL) API account that will use customer-managed keys stored in Azure Key Vault.

You need to configure an access policy in Key Vault to allow Azure Cosmos DB access to the keys.

Which three permissions should you enable in the access policy? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer: A, B, G

by Terry at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium DP-420 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Arthur
1 month ago
Agreed! Those three permissions cover the access policy well.
upvoted 0 times
...
Donette
1 month ago
Don't forget "Unwrap Key" too! It's crucial for decryption.
upvoted 0 times
...
Terrilyn
2 months ago
Definitely! "Wrap Key" is also essential for encryption.
upvoted 0 times
...
Lucille
2 months ago
I think we need to allow "Get" for accessing the keys.
upvoted 0 times
...
Pura
2 months ago
Why do we need "Wrap Key"? That sounds a bit confusing!
upvoted 0 times
...
Stephaine
2 months ago
Totally agree with the first two, but I'm not sure about "List" either.
upvoted 0 times
...
Willard
2 months ago
Wait, do you really need "List"? Seems unnecessary to me.
upvoted 0 times
...
Shaunna
2 months ago
I think "Get" is also essential for accessing the keys.
upvoted 0 times
...
Shalon
3 months ago
You definitely need "Wrap Key" and "Unwrap Key" for Cosmos DB.
upvoted 0 times
...
Margurite
3 months ago
B, C, and G. Easy peasy, just like my morning coffee.
upvoted 0 times
...
Micaela
3 months ago
B, C, and G - the holy trinity of Key Vault permissions for Cosmos DB.
upvoted 0 times
...
Darrel
4 months ago
I'd go with B, C, and G. Gotta make sure Cosmos DB can access those keys, am I right?
upvoted 0 times
...
Myrtie
4 months ago
Definitely B, C, and G. Can't forget those key permissions!
upvoted 0 times
...
Maxima
4 months ago
B, C, G
upvoted 0 times
...
Francisca
4 months ago
I feel like "Update" might be relevant, but I’m leaning towards "Get" and "Unwrap Key" being the most critical permissions we need.
upvoted 0 times
...
Luisa
4 months ago
I practiced a similar question where "List" was mentioned, but I can't recall if it's necessary here. Maybe it’s just for viewing keys?
upvoted 0 times
...
Ettie
5 months ago
I'm not entirely sure, but I remember something about needing "Wrap Key" and "Unwrap Key" for encryption and decryption processes.
upvoted 0 times
...
Macy
5 months ago
I think we need the "Get" permission for Azure Cosmos DB to retrieve the keys from Key Vault. That seems essential.
upvoted 0 times
...
Oliva
5 months ago
I've got this! The key permissions Azure Cosmos DB needs are "Get", "Wrap Key", and "Unwrap Key". That should give it the access it needs to the customer-managed keys in Key Vault.
upvoted 0 times
...
Leana
5 months ago
Okay, let's see. I know Azure Cosmos DB needs to be able to use the keys, so I'll need permissions like "Get" and "Unwrap Key". But I'm not sure about the other options - I'll have to think this through.
upvoted 0 times
...
Rosio
5 months ago
Hmm, the question is asking which three permissions I should enable. That means I need to carefully consider each option and select the right combination.
upvoted 0 times
...
Jamal
5 months ago
I think I'll start by reviewing the key permissions that Azure Cosmos DB needs to access the keys in Key Vault. The question mentions that I need to configure an access policy, so I'll focus on that.
upvoted 0 times
Kenneth
26 days ago
Don't forget about List! It's essential for accessing keys.
upvoted 0 times
...
Charlie
1 month ago
I believe you need to enable Get and Wrap Key permissions.
upvoted 0 times
...
...

Save Cancel