Azure App Configuration · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
An ASP.NET Core application uses Azure App Configuration for application settings. A database password must not be stored as a plain value in App Con…
Practice question from Azure App Configuration (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
medium · MCQ · Q-A7ED65
An ASP.NET Core application uses Azure App Configuration for application settings. A database password must not be stored as a plain value in App Configuration. Which design securely allows the application to retrieve the password at runtime?
- A.Store the password directly in App Configuration and grant the application App Configuration Data Owner.
- B.Store the password in Azure Key Vault, store a Key Vault reference in App Configuration, and grant the application's managed identity permission to read the secret.Correct answer
- C.Encrypt the password with a customer-managed key and store the encrypted value in an App Configuration label.
- D.Store the password in an App Configuration feature flag and restrict access using a read-only connection string.
Solution
Azure App Configuration can contain a Key Vault reference instead of the secret itself. The application identity must be able to read the referenced secret in Key Vault, typically through an appropriate Azure RBAC role or access policy.
More from Azure App Configuration
- An Azure App Service uses a system-assigned managed identity to read configuration values from Azure App Configuration. The application mus…
- An ASP.NET Core application loads settings from Azure App Configuration. The team wants changes to take effect without restarting the appli…
- An ASP.NET Core application stores Api:BaseUrl in Azure App Configuration with separate Production and Staging labels. The production deplo…
- An ASP.NET Core application uses Azure App Configuration feature flags. The team wants to evaluate flags through IFeatureManager in applica…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed