Microsoft Certified: Azure Developer Associate Azure Security, Identity, and Key Vault 1

Question 1

What is a managed identity in Azure, and what problem does it solve?

Accepted Answer

A user account managed by Azure AD for service-to-service auth, eliminating stored credentials

Answer

Managed identities are Azure AD identities automatically managed by Azure for services, removing the need to store and rotate credentials in code.

Question 2

What Azure Key Vault object type stores sensitive string values like API keys and connection strings?

Accepted Answer

Secret

Answer

Key Vault Secrets store arbitrary string values such as connection strings, passwords, and API keys with access control and audit logging.

Question 3

Which Azure AD application registration element proves the app's identity to Azure AD when requesting tokens?

Accepted Answer

Client secret or certificate (credential)

Answer

A client secret or certificate is the credential that proves the application's identity to Azure AD during the OAuth 2.0 client credentials flow.

Question 4

What OAuth 2.0 flow should a confidential server-side web app use to authenticate users via Azure AD?

Accepted Answer

Authorization code flow

Answer

The authorization code flow is the recommended OAuth flow for server-side apps, exchanging a code for tokens securely on the back channel.

Question 5

What Azure Key Vault feature automatically renews certificates before they expire?

Accepted Answer

Certificate autorenew lifetime action

Answer

Key Vault certificates support lifetime action policies that trigger automatic renewal a set number of days before expiry.

Microsoft Certified: Azure Developer Associate Practice Test