AZ-204 Certification Practice Question #10

Question

You are developing an e-Commerce Web App.
You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure Active
Directory (AAD).
What should you do on the e-Commerce Web App?

Accepted Answer

To allow the e-Commerce Web App hosted in Azure App Service to securely authenticate to Azure Key Vault and fetch secrets/keys (without having to store credentials or certificates locally in the web app configuration), you should enable Managed Service Identity (MSI)—now known as Managed Identity—on the App Service. Once MSI is enabled, Azure automatically manages the identity in Microsoft Entra (Azure AD), which can then be assigned permissions (using Key Vault Access Policies or Azure RBAC) to access the Key Vault.

More AZ-204 practice questions