Microsoft Azure Fundamentals (AZ-900)Describe Azure identity, security, and networkingMedium
A developer needs to integrate an Azure Function App with an Azure SQL Database. The Function App will retrieve sensitive connection strings and API keys to access the database and other external services. To protect these secrets, which Azure service should the developer use?
- AAzure Monitor
- BAzure Storage Account
- CAzure Key Vault
- DAzure Active Directory
Show answer & explanationAnswer & explanation
Correct answer: C. Azure Key Vault
Azure Key Vault is a service for securely storing and accessing secrets, such as API keys, passwords, certificates, and cryptographic keys. It is designed to protect sensitive information that applications and users need.
Why the other options are wrong
- A. Azure Monitor is for collecting, analyzing, and acting on telemetry data from your Azure and on-premises environments.
- B. Azure Storage Account is for storing data, not for securely managing application secrets.
- D. Azure Active Directory is an identity and access management service, not a secret storage service for applications.
Azure Key Vault
A cloud service for securely storing and accessing secrets, such as API keys, passwords, certificates, and cryptographic keys.
- Helps safeguard cryptographic keys and other secrets.
- Provides hardware security module (HSM) protected keys.
- Offers centralized management of application secrets.
Memory trick: Key Vault guards your digital keys and secrets.