Your on-premises network contains an e-commerce web app that was developed in Angular and Nodejs. The web app uses a MongoDB database. You plan to migrate the web app to Azure. The solution architecture team proposes the following architecture as an Azure landing zone.

You need to provide recommendations to secure the connection between the web app and the database. The solution must follow the Zero Trust model.
Solution: You recommend implementing Azure Key Vault to store credentials.
Suggested Answer: B
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
HI
Hillary
11 months ago
I thought there were better options for securing DB connections.
CA
Carmen
11 months ago
Key Vault is essential for Zero Trust, good call!
CA
Catherin
12 months ago
Wait, isn't Key Vault just for secrets? What about other security measures?
SH
Sharita
12 months ago
Totally agree, it enhances security big time.
DE
Devon
1 year ago
Storing credentials in Azure Key Vault is a solid move!
MA
Marya
1 year ago
I vaguely recall that just using Key Vault might not cover all aspects of securing the connection. We might need to consider network security groups or private endpoints too.
CE
Celia
1 year ago
I feel like while Key Vault is important, there might be additional steps needed to fully align with the Zero Trust model.
GL
Gladis
1 year ago
I think we practiced a similar question where we had to secure app connections, and Key Vault was part of the solution, right?
XU
Xuan
1 year ago
I remember we discussed using Azure Key Vault for managing secrets, but I'm not sure if it's enough for securing the database connection.
LO
Louann
1 year ago
This one seems straightforward. I think the answer is B - we want to reduce the coupling of the service logic to the service contract to keep the contract decoupled.
JU
Junita
1 year ago
This question seems straightforward. I'll focus on the key tasks like inventory data sources and reviewing network topology.
ET
Ettie
1 year ago
Okay, let me think this through. I think the penetration testing would provide the most useful information for identifying security control gaps on an application server. That's my best guess.
AN
Anissa
1 year ago
This is a straightforward question about process mapping terminology. NVA means non-value add, so I'll confidently select A as the answer.