AZ-104 Certification Practice Question #19

Question

You have downloaded an Azure Resource Manager (ARM) template to deploy numerous virtual machines (VMs). The ARM template is based on a current VM, but must be adapted to reference an administrative password.
You need to make sure that the password cannot be stored in plain text.
You are preparing to create the necessary components to achieve your goal.
Which of the following should you create to achieve your goal? Answer by dragging the correct option from the list to the answer area.
Select and Place:

Accepted Answer

To deploy virtual machines using an ARM template without storing the administrator password in plain text, you must store the password as a secret in Azure Key Vault and reference it in the parameters file. To allow the Azure Resource Manager deployment engine to access this secret during execution, the Key Vault must have its template deployment feature enabled. This is accomplished by configuring an access policy on the Key Vault (specifically enabling the `enabledForTemplateDeployment` property, which represents the access policy for Resource Manager). Therefore, you must create **An Azure Key Vault** and **An access policy**.

More AZ-104 practice questions