What is the primary authentication mechanism for Azure Key Vault when accessed by applications?

Azure Active Directory (Azure AD) tokens

What problem do managed identities solve for Azure developers?

The need to configure network security groups for virtual machines

The need to manually scale applications based on load

The need to write custom encryption algorithms for data at rest

The need to manage and rotate credentials for authenticating to Azure services

A company is using Azure App Configuration to manage feature flags for a multi-tenant application. Each tenant should only see its own feature flags. The company also wants to store tenant-specific secrets in Key Vault. What is the recommended approach?

Create a separate App Configuration store and Key Vault for each tenant.

Use a single App Configuration store with key labels for each tenant, and use Key Vault references for tenant-specific secrets.

Store all feature flags in a single App Configuration store and use application code to filter by tenant.

Use Key Vault for both feature flags and secrets, with a separate secret per tenant.

A developer is writing a .NET application that runs on an Azure VM with a system-assigned managed identity. The application needs to retrieve a secret from Key Vault. The developer is using the Azure SDK. The code throws an AuthenticationFailedException. The VM's managed identity has been granted the 'Key Vault Secrets User' role. What is the most likely cause?

The Key Vault firewall is blocking the VM's IP address.

The application is using the wrong credential type, such as ClientSecretCredential, instead of DefaultAzureCredential.

The managed identity is not enabled on the VM.

Azure Developer Associate

Domain 3Objective 2

Implement Secure Azure Solutions AZ-204 Practice Questions (Page 6)

Part of the Implement Azure security domain, which accounts for 15-20% of the AZ-204 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

8concepts

15-20%of the exam

Questions 26–30

26foundation · easy
What is the primary authentication mechanism for Azure Key Vault when accessed by applications?
Select an answer first
27foundation · easy
What problem do managed identities solve for Azure developers?
Select an answer first
28expert · hard
A company is using Azure App Configuration to manage feature flags for a multi-tenant application. Each tenant should only see its own feature flags. The company also wants to store tenant-specific secrets in Key Vault. What is the recommended approach?
Select an answer first
29expert · hard
A developer is writing a .NET application that runs on an Azure VM with a system-assigned managed identity. The application needs to retrieve a secret from Key Vault. The developer is using the Azure SDK. The code throws an AuthenticationFailedException. The VM's managed identity has been granted the 'Key Vault Secrets User' role. What is the most likely cause?
Select an answer first
30foundation · easy
Which Azure service is specifically designed to securely store and manage cryptographic keys, secrets, and certificates?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-204

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-204” is a trademark of its owner, used for identification only.

Implement Secure Azure Solutions AZ-204 Practice Questions (Page 6)

Questions 26–30

What is the primary authentication mechanism for Azure Key Vault when accessed by applications?

What problem do managed identities solve for Azure developers?

A company is using Azure App Configuration to manage feature flags for a multi-tenant application. Each tenant should only see its own feature flags. The company also wants to store tenant-specific secrets in Key Vault. What is the recommended approach?

Which Azure service is specifically designed to securely store and manage cryptographic keys, secrets, and certificates?

Keep studying — Implement Azure security