AZ-400 Question 124

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  The correct answer is C. Get and List. Why "Get and List" is Required When you use the default Azure Key Vault configuration provider in an ASP.NET Core application, the framework automatically loads secrets into the application's configuration mapping at startup. To achieve this, the configuration provider performs two sequential operations: 1. List: It needs the List permission to enumerate (discover) the names of all the secrets stored in your Key Vault. 2. Get: It needs the Get permission to retrieve the actual values of those enumerated secrets so they can be loaded into memory. The Principle of Least Privilege While it might seem that Get only is more restrictive, choosing Get and List satisfies the principle of least privilege in this specific scenario because it provides the absolute minimum

• Chose B1

  AI answer To adhere to the principle of least privilege for an ASP.NET Core application retrieving secrets from Azure Key Vault, the correct choice is: B. Get only Technical Reasoning When you integrate Azure Key Vault with ASP.NET Core using the standard configuration provider, the application needs to retrieve the value of specific secrets to populate its configuration settings. Get: This permission allows the application to retrieve the actual secret value. Without it, the application cannot read the data it needs to run. List: This permission allows an entity to browse the names (metadata) of all secrets within the vault.

• Chose C2

  Reference Safiqee