az-900 Practice Question 505
Exam: az-900
Domain: Describe cloud concepts
Topic: Describe cloud computing
Difficulty: medium
Your company plans to automate the deployment of servers to Azure.\nYour manager is concerned that you may expose administrative credentials during the deployment.\nYou need to recommend an Azure solution that encrypts the administrative credentials during the deployment.\nWhat should you include in the recommendation?\nA. Azure Key Vault\nB. Azure Information Protection\nC. Azure Security Center\nD. Azure Multi-Factor Authentication (MFA)
Answer Options
A
Azure Key Vault
B
Azure Information Protection
C
Azure Security Center
D
Azure Multi-Factor Authentication (MFA)
Correct Answer
A: Azure Key Vault
Explanation
Azure Key Vault is a secure store for storage various types of sensitive information. In this question, we would store the administrative\ncredentials in the Key Vault.\nWith this solution, there is no need to store the administrative credentials as plain text in the deployment scripts.\nAll information stored in the Key Vault is encrypted.\nAzure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.\nSecrets and keys are safeguarded by Azure, using industry-standard algorithms, key lengths, and hardware security modules (HSMs). The HSMs\nused are\nFederal Information Processing Standards (FIPS) 140-2 Level 2 validated.\nAccess to a key vault requires proper authentication and authorization before a caller (user or application) can get access. Authentication\nestablishes the identity of the caller, while authorization determines the operations that they are allowed to perform.