Microsoft Certified: Azure Developer Associate Azure Security, Identity, and Key Vault

Question 1

What is a managed identity in Azure, and what problem does it solve?

Accepted Answer

A user account managed by Azure AD for service-to-service auth, eliminating stored credentials

Answer

An identity for VM guest OS logins only

Answer

A service principal with a client certificate

Answer

A role assignment for resource groups

Question 2

What Azure Key Vault object type stores sensitive string values like API keys and connection strings?

Accepted Answer

Secret

Answer

Key

Answer

Certificate

Answer

Token

Question 3

Which Azure AD application registration element proves the app's identity to Azure AD when requesting tokens?

Accepted Answer

Client secret or certificate (credential)

Answer

Application (client) ID

Answer

Redirect URI

Answer

Tenant ID

Question 4

What OAuth 2.0 flow should a confidential server-side web app use to authenticate users via Azure AD?

Accepted Answer

Authorization code flow

Answer

Implicit flow

Answer

Client credentials flow

Answer

Device code flow

Question 5

What Azure Key Vault feature automatically renews certificates before they expire?

Accepted Answer

Certificate autorenew lifetime action

Answer

Key rotation policy

Answer

Secret versioning

Answer

Soft-delete retention

Question 6

Which MSAL (Microsoft Authentication Library) method acquires a token silently from the cache before falling back to interactive login?

Accepted Answer

AcquireTokenSilent

Answer

AcquireTokenInteractive

Answer

AcquireTokenOnBehalfOf

Answer

AcquireTokenByUsernamePassword