Topic 1 · Question 254

This question requires that you evaluate the underlined text to determine if it is correct.
Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts.
Instructions: Review the underlined text. If it makes the statement correct, select `No change is needed`. If the statement is incorrect, select the answer choice that makes the statement correct.

A. No change is needed

B. Azure Active Directory (Azure AD) administrative accounts

C. Personally Identifiable Information (PII)

D. server applications

Top comment

Community votes:D · 14 (54%)A · 11 (42%)C · 1 (4%)

Moon▲ 132Highly votedNovember 24, 2019 05:27 pm

I would go with "D". Server Applications.

9 more highly voted comments

MCLC2021▲ 31Highly votedJune 06, 2021 11:34 am

I think that underlined text in the phrase is: "...Azure Active Directory (Azure AD) user accounts."

so if you read the "Important" section in the link https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/2-what-is-key-vault

You can read: "Key Vault is designed to store configuration secrets for server apps."

Tolulee▲ 18Highly votedApril 29, 2020 11:55 pm

Azure Key Vault enables Microsoft Azure applications and users to store and use several types of secret/key data:

Both application and users. A is correct

cetag37681▲ 17Highly votedJanuary 31, 2020 03:36 am

D - Should be the answer. Why would Vault be used to store (Azure AD) user accounts but not (Azure AD) admin accounts? makes no sense.

shashu07▲ 12Highly votedNovember 17, 2020 03:05 am

Answer A, as per attached Microsoft Article

function that connects to an Azure Key Vault using Azure Active Directory authentication, and then uses a secret stored in the vault to query a remote service.

// Create a Key Vault client with an Active Directory authentication callback
var keyVault = new KeyVaultClient(async (string authority, string resource, string scope) => {
var authContext = new AuthenticationContext(authority);
var credential = new ClientCredential(adClientId, adKey);
var token = await authContext.AcquireTokenAsync(resource, credential);
return token.AccessToken;

https://devblogs.microsoft.com/dotnet/storing-and-using-secrets-in-azure/

EricMok▲ 9Highly votedApril 04, 2021 04:04 pm

Is the question not complete? How to determine the answer? What is underlined text?

ShawnKW▲ 9Highly votedMarch 26, 2021 04:38 pm

The answer provided is Correct. (D)
https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/2-what-is-key-vault
Just open the link and read the *Important section.
Important
Key Vault is designed to store configuration secrets for server apps. It's not intended for storing data belonging to your app's users, and it shouldn't be used in the client-side part of an app. This is reflected in its performance characteristics, API, and cost model.

User data should be stored elsewhere, such as in an Azure SQL database with Transparent Data Encryption, or a storage account with Storage Service Encryption. Secrets used by your app to access those data stores can be kept in Key Vault.

thakur▲ 9Highly votedNovember 26, 2019 04:26 pm

It's A
https://docs.microsoft.com/en-us/azure/key-vault/quick-create-portal

lollo1234▲ 9Highly votedOctober 12, 2020 11:48 pm

What's the point of posting a random link thaht doesn't support your answer?

ahmadrehan▲ 7Highly votedSeptember 03, 2020 10:26 am

My answer is D
Key Vault is designed to store configuration secrets for server applications
https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault//2-what-is-key-vault

Open discussion on ExamTopics ↗