You are developing an AI-powered API that retrieves connection strings and API keys from Azure...

Microsoft AI-200 Question Answer

You are developing an AI-powered API that retrieves connection strings and API keys from Azure Key Vault.

You must configure a solution that provides the following security functionality:

• The API must authenticate to Key Vault without storing credentials in any application configuration files

• The identity used by the API must have only the minimum permissions necessary to read secrets.

• The configuration must minimize the blast radius if an identity or credential is compromised.

You need to implement a secure access strategy for the API.

Which two actions should you perform? Each correct answer presents part of the solution. Choose two.

NOTE: Each correct selection is worth one point.

Store a secret value in Azure App Configuration.

Assign the Key Vault Administrator role at subscription scope.

Grant the Key Vault Secrets User role at vault scope

Use system assigned managed identity.

Microsoft AI-200 Summary

Price: $52.5 ~~$149.99~~