New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft DP-420 Exam - Topic 3 Question 71 Discussion

Actual exam question for Microsoft's DP-420 exam
Question #: 71
Topic #: 3
[All DP-420 Questions]

You plan to create an Azure Cosmos DB Core (SQL) API account that will use customer-managed keys stored in Azure Key Vault.

You need to configure an access policy in Key Vault to allow Azure Cosmos DB access to the keys.

Which three permissions should you enable in the access policy? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer: A, B, G

by Terry at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium DP-420 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Micaela
10 days ago
B, C, and G - the holy trinity of Key Vault permissions for Cosmos DB.
upvoted 0 times
...
Darrel
15 days ago
I'd go with B, C, and G. Gotta make sure Cosmos DB can access those keys, am I right?
upvoted 0 times
...
Myrtie
20 days ago
Definitely B, C, and G. Can't forget those key permissions!
upvoted 0 times
...
Maxima
25 days ago
B, C, G
upvoted 0 times
...
Francisca
1 month ago
I feel like "Update" might be relevant, but I’m leaning towards "Get" and "Unwrap Key" being the most critical permissions we need.
upvoted 0 times
...
Luisa
1 month ago
I practiced a similar question where "List" was mentioned, but I can't recall if it's necessary here. Maybe it’s just for viewing keys?
upvoted 0 times
...
Ettie
1 month ago
I'm not entirely sure, but I remember something about needing "Wrap Key" and "Unwrap Key" for encryption and decryption processes.
upvoted 0 times
...
Macy
2 months ago
I think we need the "Get" permission for Azure Cosmos DB to retrieve the keys from Key Vault. That seems essential.
upvoted 0 times
...
Oliva
2 months ago
I've got this! The key permissions Azure Cosmos DB needs are "Get", "Wrap Key", and "Unwrap Key". That should give it the access it needs to the customer-managed keys in Key Vault.
upvoted 0 times
...
Leana
2 months ago
Okay, let's see. I know Azure Cosmos DB needs to be able to use the keys, so I'll need permissions like "Get" and "Unwrap Key". But I'm not sure about the other options - I'll have to think this through.
upvoted 0 times
...
Rosio
2 months ago
Hmm, the question is asking which three permissions I should enable. That means I need to carefully consider each option and select the right combination.
upvoted 0 times
...
Jamal
2 months ago
I think I'll start by reviewing the key permissions that Azure Cosmos DB needs to access the keys in Key Vault. The question mentions that I need to configure an access policy, so I'll focus on that.
upvoted 0 times
...

Save Cancel