Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?
Azure Key Vault is a cloud service designed to securely store and access secrets such as tokens, passwords, certificates, and API keys. It provides encryption for sensitive information and tightly controls access through authentication and authorization. By storing administrative credentials in Azure Key Vault, they are encrypted and securely handled during the deployment process, reducing the risk of exposure. This solution is ideal for environments where protecting sensitive data during automated processes is critical.
A Use Azure Key Vault to encrypt keys and small secrets like passwords that use keys stored in hardware security modules (HSMs). https://azure.microsoft.com/en-us/services/key-vault/
Question is about protecting credential during an automated deployment (e.g. not typing password in clear text in a JSON template or PS script), not protecting information inside documents (or logins). Azure Key Vault is the only correct answer for this scenario
I got this in my exam (May 2021)
"Azure Resource Manager can securely deploy certificates stored in Azure Key Vault to Azure VMs when the VMs are deployed." https://docs.microsoft.com/en-us/azure/security/fundamentals/data-encryption-best-practices So answer is Azure Key Vault
Azure Key Vault is a cloud service that provides a secure store for secrets. You can securely store keys, passwords, certificates, and other secrets. The answer is definitely Azure Key Vault.
The answer is A. Azure Key Vault can encrypt the passwords.
Got it on 06-09-2021
A is correct. https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/key-vault-parameter?tabs=azure-cli
that's the 3rd time i read the same question, but it is okay
Key Vault, same questions as before.
also the same question as before pls remove this one, answer is corrcet.
Same as question 244. https://www.examtopics.com/discussions/microsoft/view/85481-exam-az-900-topic-1-question-244-discussion
A is the answer. https://learn.microsoft.com/en-us/azure/key-vault/general/overview Azure Key Vault is one of several key management solutions in Azure, and helps solve the following problems: - Secrets Management - Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.
Azure Key Vault is a service that allows you to store and manage cryptographic keys and secrets, such as certificates, connection strings, and passwords. It provides secure storage and management of sensitive information, and it allows you to control access to the secrets through role-based access control. You can use Azure Key Vault to encrypt the administrative credentials during the deployment process by storing the credentials in Azure Key Vault and then using the Azure Key Vault client to retrieve the credentials when you deploy the servers.
Key words: encrypt
Got in exam July02,2021
Correct answer
Azure Key Valut