Implement Secure Azure Solutions AI-200 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard · select all that apply

   A company is designing a solution to manage secrets for multiple applications. They have the following requirements: (1) Secrets must be stored centrally and audited. (2) Access must be revocable per application. (3) Secrets must be automatically rotated. (4) The solution must support storing non-secret configuration separately. Which two Azure services should they use? Select all that apply.

   • AAzure DevOps variable groups for configuration.
   • BAzure Key Vault for secret storage and rotation.
   • CAzure Storage with encryption for secret storage.
   • DAzure App Configuration for non-secret configuration.
   Check answers Discussion Select an answer first
2. 12foundation · easy

   Which Azure SDK method is used to retrieve a secret from Azure Key Vault in a .NET application?

   • AGetBlobAsync
   • BGetSecretValueAsync
   • CGetConfigurationAsync
   • DGetSecretAsync
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of implementing secret rotation in Azure Key Vault?

   • ATo reduce the risk of a compromised secret being used by automatically replacing it with a new one on a schedule or in response to events
   • BTo increase the number of secrets stored in the vault to improve performance
   • CTo permanently delete old secrets to free up storage space
   • DTo change the access policies of the Key Vault to allow more users
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A team is developing a microservices application that needs to share common configuration settings, such as service endpoints and feature flags. They want to avoid duplicating configuration in each service and ensure that changes are reflected without redeploying each service. What should they use?

   • AA central database table that each service queries for configuration.
   • BAzure App Configuration to store shared settings and have each service connect to the same store.
   • CAzure Key Vault to store shared settings and have each service retrieve them.
   • DA shared environment variable file that is copied to each service during deployment.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has a legacy application that reads configuration from a local XML file. They are migrating to Azure and want to use Azure App Configuration to manage settings centrally. The application must be modified as little as possible. What is the most efficient way to migrate the configuration?

   • AUse Azure Key Vault to store the XML file as a secret and retrieve it in the application.
   • BStore the XML file in Azure Blob Storage and have the application download it at startup.
   • CImport the XML file into Azure App Configuration and use the App Configuration SDK in the application.
   • DManually copy each setting from the XML file into App Configuration and update the application to use the REST API.
   Reveal Solution Discussion Select an answer first