AZ-400 – Question 84

0
85
Your company has a project in Azure DevOps for a new web application.

The company identifies security as one of the highest priorities.
You need to recommend a solution to minimize the likelihood that infrastructure credentials will be leaked.
What should you recommend?
A. Add a Run Inline Azure PowerShell task to the pipeline.
B. Add a PowerShell task to the pipeline and run Set-AzureKeyVaultSecret.
C. Add an Azure Key Vault task to the pipeline.
D. Add Azure Key Vault references to Azure Resource Manger templates. 
 
Correct Answer: D

In my opinion D is the best answer because the requirement is to minimize the likelihood that infrastructure credentials will be leaked. The security is one of the highest priority, and for that the possibility to know the secret name (as AKV task could consent) is not the best practice.

NO COMMENTS