Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: DevOps Engineer Expert · Microsoft
Drag & Drop Scenario
Read the scenario requirements and decide your answer. Click Check Answer below to see the marked solution.
Hotspot Solution:
From ChatGPT: To use a secret stored in an Azure Key Vault in an Azure DevOps deployment pipeline, you would typically perform the following actions in sequence: Create a service principal in Azure Active Directory (Azure AD): This service principal will represent the identity that the deployment pipeline will use to access Azure resources, including the Azure Key Vault. Add an app registration in Azure Active Directory (Azure AD): Create an app registration in Azure AD associated with the service principal, which will provide the necessary details for authentication. Configure an access policy in the key vault: Grant the app registration the necessary permissions (like Get or List) on the secrets stored in the Azure Key Vault. So, the correct sequence is: Create a service principal in Azure Active Directory (Azure AD) Add an app registration in Azure Active Directory (Azure AD) Configure an access policy in the key vault
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Question is outdated: now you can do this by creating an ARM service connection with the automatic wizard, which creates the SPN, activate RBAC for your KeyVault, grant permissions to the generated SPN's application, then link a variable group to the KeyVault in DevOps
From ChatGPT: To use a secret stored in an Azure Key Vault in an Azure DevOps deployment pipeline, you would typically perform the following actions in sequence: Create a service principal in Azure Active Directory (Azure AD): This service principal will represent the identity that the deployment pipeline will use to access Azure resources, including the Azure Key Vault. Add an app registration in Azure Active Directory (Azure AD): Create an app registration in Azure AD associated with the service principal, which will provide the necessary details for authentication. Configure an access policy in the key vault: Grant the app registration the necessary permissions (like Get or List) on the secrets stored in the Azure Key Vault. So, the correct sequence is: Create a service principal in Azure Active Directory (Azure AD) Add an app registration in Azure Active Directory (Azure AD) Configure an access policy in the key vault
Final answer after reading all the comments - Provided answer by examtopics is right (Service Principal need to use instead of app registration as app registration only used in web app and here it is not mentioned anywhere )