Implement Secure Azure Solutions AI-200 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which Azure SDK client class is used to retrieve configuration settings from Azure App Configuration in a .NET application?

   • ASecretClient
   • BTableClient
   • CBlobClient
   • DConfigurationClient
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has multiple applications that share the same configuration settings, such as database connection endpoints and logging levels. They want to centralize these settings and allow different environments (dev, test, prod) to have different values. What should they use?

   • AAzure App Configuration with labels to differentiate environments.
   • BAzure Key Vault to store all configuration settings.
   • CA shared appsettings.json file in a common repository.
   • DAzure DevOps variable groups for each environment.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is using Azure App Configuration to manage feature flags for a web application. They want to ensure that only authorized users can modify feature flags, while all developers can read them. What should they implement?

   • AUse Azure RBAC to assign the 'App Configuration Data Reader' role to developers and the 'App Configuration Data Owner' role to a select group of administrators.
   • BUse Azure Key Vault access policies to control access to feature flags.
   • CUse a shared access signature (SAS) token for all developers to read and write feature flags.
   • DUse Azure AD groups and assign the 'Contributor' role to all developers.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A developer is writing a Python application that runs on an Azure VM. The application needs to retrieve a secret from Azure Key Vault. The developer wants to avoid storing any credentials in the application code. What is the recommended approach?

   • AUse the Azure SDK for Python with DefaultAzureCredential, which will use the VM's managed identity.
   • BUse the Key Vault REST API with a certificate stored in the application's directory.
   • CUse the Key Vault REST API with a client secret stored in an environment variable.
   • DUse the Azure CLI to retrieve the secret and pass it to the application as a command-line argument.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is migrating an on-premises application to Azure. The application currently stores database credentials in a configuration file. The security team requires that credentials be stored in a centralized, audited location and that access be revocable per application. What should the company use?

   • AEnvironment variables in each application's hosting environment.
   • BAzure App Configuration to store the credentials as key-value pairs.
   • CAzure Key Vault to store the credentials and grant each application its own managed identity with access policies.
   • DA shared Azure Storage account with the credentials in a blob.
   Reveal Solution Discussion Select an answer first