AZ-104 Certification Practice Question #112

Question

You have an Azure subscription that contains the resources shown in the following table.

You plan to use an Azure key vault to provide a secret to app1.

What should you create for app1 to access the key vault, and from which key vault can the secret be used? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

To allow App1 to securely access Azure Key Vault without embedding credentials in the code, a Managed Identity (system-assigned or user-assigned) must be created and granted access. Azure Key Vault does not enforce regional or resource group isolation for access; any application with network visibility and authorization (configured via RBAC or Key Vault access policies) can retrieve secrets from any vault in the subscription, regardless of whether it is located in the same or a different region or resource group. Therefore, the secret can be used from Vault1, Vault2, or Vault3.

More AZ-104 practice questions