Design and Implement a Strategy for Managing Sensitive Information in Automation AZ-400 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which Azure CLI command is used to store a secret named 'MySecret' with the value 'MyValue' in an existing key vault named 'MyVault'?

   • Aaz keyvault secret set --vault-name MyVault --name MySecret --value MyValue
   • Baz keyvault secret add --vault-name MyVault --name MySecret --value MyValue
   • Caz keyvault set-secret --vault-name MyVault --name MySecret --value MyValue
   • Daz keyvault secret create --vault-name MyVault --secret-name MySecret --value MyValue
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary benefit of using workload identity federation for authentication in automation?

   • AIt replaces the need for Azure Active Directory entirely.
   • BIt eliminates the need to store and manage long-lived credentials like service principal secrets.
   • CIt provides a way to use username and password authentication for Azure services.
   • DIt allows any user to authenticate to Azure without any configuration.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   Your GitHub Actions workflow deploys to Azure using a service principal. The service principal's client secret is stored as a GitHub secret. You want to eliminate the need to rotate and manage this client secret. What should you do?

   • AStore the client secret in Azure Key Vault and reference it in the workflow using the azure/keyvault-secrets action.
   • BConfigure OpenID Connect in GitHub Actions and use the azure/login action with the federated credential.
   • CEmbed the client secret directly in the workflow YAML file.
   • DUse a GitHub environment secret instead of a repository secret for the client secret.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   Your organization uses both GitHub Actions and Azure Pipelines for CI/CD. You want to implement secretless authentication to Azure for both platforms. You have a requirement to minimize administrative overhead and ensure that credentials are rotated automatically. Which strategy should you adopt?

   • AUse a service principal with a certificate, and store the certificate in both platforms.
   • BUse a different service principal for each platform, each with a client secret.
   • CUse workload identity federation for both GitHub Actions and Azure Pipelines, configuring federated credentials for each platform.
   • DUse a single service principal with a client secret for both platforms, storing the secret in both GitHub and Azure Pipelines.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a recommended practice to prevent sensitive information leakage in a CI/CD pipeline?

   • AShare the same secret across all environments to reduce complexity.
   • BLog all secret values to a central monitoring system for auditing.
   • CUse environment-specific variable groups and restrict access to them.
   • DHardcode secrets directly in the pipeline YAML for simplicity.
   Reveal Solution Discussion Select an answer first