Topic 1 · Question 273
A. an Azure Storage account
B. Azure Active Directory (Azure AD)
C. a certificate store
D. an Azure key vault
Top comment
Community votes:B · 23 (66%)D · 11 (31%)A · 1 (3%)
22 more highly voted comments
JasonB▲ 148Highly votedSeptember 02, 2019 03:46 pm
Not Agree
The Azure Key Vault store Keys.
Azure AD give acces tokens.
The Azure Key Vault store Keys.
Azure AD give acces tokens.
RTT1976▲ 67Highly votedOctober 26, 2019 11:35 am
The answer B is correct, because it asks what "an application should connect to".
An Application cannot connect to a Key Vault.
An Application cannot connect to a Key Vault.
sbettani▲ 23Highly votedNovember 22, 2019 03:44 pm
Key vault is ment to STORE security tokens, while AD is ment to give access to tokens
shashu07▲ 22Highly votedNovember 16, 2020 04:05 am
Question is about accessing / retrieving security tokens token from Application & not storing the same.
Microsoft identity platform authenticates users and provides security tokens, such as access token, refresh token, and ID token, that allow a client application to access protected resources on a resource server.
https://docs.microsoft.com/en-us/azure/active-directory/develop/security-tokens
Microsoft identity platform authenticates users and provides security tokens, such as access token, refresh token, and ID token, that allow a client application to access protected resources on a resource server.
https://docs.microsoft.com/en-us/azure/active-directory/develop/security-tokens
Berg▲ 19Highly votedFebruary 05, 2020 06:08 pm
KeyVault can also store tokens.
"Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets"
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
"Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets"
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
Berg▲ 19Highly votedFebruary 05, 2020 06:08 pm
KeyVault can also store tokens.
"Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets"
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
"Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets"
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
ilaiya▲ 16Highly votedFebruary 27, 2020 07:43 pm
KeyVault - Keys
AD - Tokens
AD - Tokens
JustSignalingVirtues▲ 15Highly votedMay 23, 2022 02:54 am
Security Token is not a Secret. Password, Private Keys, Certificates, etc., are secrets. Tokens are generated when request is made and they change with almost each request and valid for short duration only. So, there is no point in protecting the token by storing it in the vault to use it when needed, it is not a static value.
TexTheDog▲ 14Highly votedMay 14, 2021 02:49 am
IT IS B: The link below states that tokens comes from Azure AD
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app?tabs=dotnet
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app?tabs=dotnet
dani6666▲ 11Highly votedFebruary 22, 2020 05:39 pm
AKV store ACCESS TO tokens (so the keys), not tokens itself
dani6666▲ 11Highly votedFebruary 22, 2020 05:39 pm
AKV store ACCESS TO tokens (so the keys), not tokens itself
dani6666▲ 11Highly votedFebruary 22, 2020 05:39 pm
AKV store ACCESS TO tokens (so the keys), not tokens itself
exam_taker5▲ 9Highly votedAugust 01, 2019 08:41 pm
agreed
Stuudent▲ 8Highly votedOctober 07, 2020 08:03 pm
You may store the token in a vault but I don't think apps will be able to connect to it to retrieve the token in order to access anything. For that you need an OpenID Connect flow (for example) which involves AD:
https://docs.microsoft.com/en-us/azure/active-directory/develop/security-tokens
and then:
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
https://docs.microsoft.com/en-us/azure/active-directory/develop/security-tokens
and then:
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
richardsonbq▲ 8Highly votedNovember 12, 2019 11:15 pm
But in the context of the answer, I believe AD is more appropriate as per https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios#security-tokens
richardsonbq▲ 8Highly votedNovember 12, 2019 11:13 pm
Actually, the Key Vault can be accessed by an Application to retrieve secure information. So I'm not sure if AD is the only right answer here...
richardsonbq▲ 8Highly votedNovember 12, 2019 11:15 pm
But in the context of the answer, I believe AD is more appropriate as per https://docs.microsoft.com/en-us/azure/active-directory/develop/authentication-scenarios#security-tokens
Stuudent▲ 8Highly votedOctober 07, 2020 08:03 pm
You may store the token in a vault but I don't think apps will be able to connect to it to retrieve the token in order to access anything. For that you need an OpenID Connect flow (for example) which involves AD:
https://docs.microsoft.com/en-us/azure/active-directory/develop/security-tokens
and then:
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
https://docs.microsoft.com/en-us/azure/active-directory/develop/security-tokens
and then:
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
Stuudent▲ 8Highly votedOctober 07, 2020 08:03 pm
You may store the token in a vault but I don't think apps will be able to connect to it to retrieve the token in order to access anything. For that you need an OpenID Connect flow (for example) which involves AD:
https://docs.microsoft.com/en-us/azure/active-directory/develop/security-tokens
and then:
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
https://docs.microsoft.com/en-us/azure/active-directory/develop/security-tokens
and then:
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc
bratpyt▲ 7Highly votedJanuary 10, 2021 07:25 pm
This question is stupid. It should be specified whether you are getting this token by authenticating or you are already authenticated and you've got this token long time ago and you need a secure place to store it. So I have no idea whether is should be B or D, this question is unambiguous
zmujtaba▲ 7Highly votedJanuary 08, 2020 08:50 pm
A key advantage of using Azure Active Directory (Azure AD) with Azure Blob storage or Queue storage is that your credentials no longer need to be stored in your code. Instead, you can request an OAuth 2.0 access token from the Microsoft identity platform (formerly Azure AD). Azure AD authenticates the security principal (a user, group, or service principal) running the application. If authentication succeeds, Azure AD returns the access token to the application, and the application can then use the access token to authorize requests to Azure Blob storage or Queue storage.
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-app
clouddba▲ 7Highly votedJune 05, 2021 07:48 am
The question is "TO WHAT an APPLICATION should connect" Of course the only answer is Azure AD.
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-whatis