Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 42 of 225
Free Preview · 225 of 749 · questions 1–225 of 749 are free. Sign up free to sync your progress across devices.
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
A service principal is indeed the more appropriate choice for accessing a third-party email service using an API key. Here's a breakdown of why: Managed Service Identity (MSI) is primarily designed for accessing other Azure resources. While it can be used for external resources, it's often more complex to set up and manage. Service Principal is specifically designed for applications to authenticate to other services, including external ones. It provides a clear separation of concerns and simplifies the authentication process. To summarize: Store the API key as a secret in Azure Key Vault. Use a service principal to authenticate to the third-party email service using the API key. By following these steps, you'll ensure secure storage of the API key and efficient authentication to the external service.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A service principal is indeed the more appropriate choice for accessing a third-party email service using an API key. Here's a breakdown of why: Managed Service Identity (MSI) is primarily designed for accessing other Azure resources. While it can be used for external resources, it's often more complex to set up and manage. Service Principal is specifically designed for applications to authenticate to other services, including external ones. It provides a clear separation of concerns and simplifies the authentication process. To summarize: Store the API key as a secret in Azure Key Vault. Use a service principal to authenticate to the third-party email service using the API key. By following these steps, you'll ensure secure storage of the API key and efficient authentication to the external service.
But isn't it the App that's making the call to Key Vault rather than the VM? If so, I think the answer for the second question would be an API token.
The given answer is correct. Storage: Secret: API keys are best stored as secrets in Azure Key Vault. Access: Managed Service Identity (MSI): Allows the app to authenticate to Azure Key Vault without needing to manage credentials, simplifying access management.