Design and Implement a Strategy for Managing Sensitive Information in Automation AZ-400 Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   In Azure Pipelines, where are secret variables defined for a pipeline?

   • AIn the Azure Key Vault, and they are automatically available to the pipeline without any configuration.
   • BIn the pipeline's variables tab in the Azure DevOps UI, with the 'Keep this value secret' checkbox selected.
   • CIn the pipeline YAML file under the 'variables' section with the 'secret' keyword.
   • DIn a text file stored in the repository and referenced in the pipeline.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which statement best describes the primary purpose of Azure Key Vault?

   • ATo provide a fully managed identity provider that authenticates users and issues tokens for applications.
   • BTo provide a centralized cloud service for securely storing and controlling access to secrets, encryption keys, and certificates.
   • CTo serve as a virtual private network gateway that encrypts all network traffic between on-premises and Azure.
   • DTo automatically rotate database passwords and enforce multi-factor authentication for all Azure users.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   Your deployment pipeline needs to download a configuration file that contains database connection strings. The file must be available only during the deployment job and must not be stored in the repository. Which solution should you use?

   • ACommit the file to a private Git repository and clone it in the pipeline.
   • BPlace the file in the agent's working directory before the job starts.
   • CStore the file in a public Azure Storage blob and download it with a SAS token in the pipeline.
   • DUpload the file as a secure file in Azure Pipelines and download it in the job using the DownloadSecureFile task.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   Your pipeline uses a secret variable that is passed to a script. The script writes the secret to a file, and you want to ensure that the file is not accessible after the job completes. You also want to avoid the secret appearing in logs. Which approach should you use?

   • AUse a secret variable and ensure the script deletes the file in a finally block, and rely on the agent's cleanup.
   • BUse a pipeline variable and rely on the agent's cleanup to delete the file.
   • CUse a plain variable and write the secret to a file in the agent's temp directory.
   • DUse a secure file to store the secret and reference it in the script.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the primary purpose of storing cryptographic keys in Azure Key Vault?

   • ATo replace the need for SSL/TLS certificates in web applications.
   • BTo provide a secure, centralized location for key management and to enable cryptographic operations without exposing the keys.
   • CTo store keys in plaintext so they can be easily copied to other systems.
   • DTo allow applications to retrieve the private key material and perform encryption locally.
   Reveal Solution Discussion Select an answer first