Azure Key Vault · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
A .NET application must digitally sign data with an RSA key stored in Azure Key Vault. The private key must remain non-exportable and must never be d…
Practice question from Azure Key Vault (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
medium · MCQ · Q-FA30B2
A .NET application must digitally sign data with an RSA key stored in Azure Key Vault. The private key must remain non-exportable and must never be downloaded by the application. Which approach should the application use?
- A.Use SecretClient to retrieve the private key as a string and sign the data locally.
- B.Use CertificateClient to download the certificate and private key, then sign locally.
- C.Use KeyClient to obtain the key identifier, create a CryptographyClient, and call SignDataAsync with the appropriate RSA signature algorithm.Correct answer
- D.Store the key in Azure Storage and use BlobClient to perform the signing operation.
Solution
Azure Key Vault performs cryptographic operations without exposing a non-exportable private key. In the .NET SDK, use KeyClient to obtain the key and CryptographyClient.SignDataAsync to request the signature from Key Vault.
More from Azure Key Vault
- An ASP.NET Core application runs in Azure App Service and must read a database password from Azure Key Vault without storing credentials in…
- An application stores a database connection string in an Azure Key Vault secret named DbConnection. The operations team rotates the value b…
- A company requires that deleted secrets in a production Key Vault remain recoverable for 90 days and cannot be permanently purged early, ev…
- An Azure App Service uses a system-assigned managed identity to read secret values from an Azure Key Vault. The identity must not create, u…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed