Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: DevOps Engineer Expert · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. Modify the application to access the key vault. C. Configure a Key Vault access policy. E. Deploy a virtual machine that uses a system-assigned managed identity.
BCE - is possible see https://docs.microsoft.com/en-us/azure/key-vault/general/tutorial-net-virtual-machine
Recommended Answer Based on the Latest Best Practices (2025) A. Configure RBAC for the Key Vault Use RBAC to assign roles like "Key Vault Reader" or "Key Vault Secrets User" to the VM's managed identity. RBAC provides more flexibility and is Microsoft's current recommendation. B. Modify the application to access the key vault The application must be updated to use Azure SDKs or APIs to fetch secrets securely. E. Deploy a virtual machine that uses a system-assigned managed identity The managed identity enables the VM to securely authenticate to Azure services, including the Key Vault, without hardcoding credentials.