AZ-500: Microsoft Azure Security Technologies

By Microsoft · Question Mode

QuestionQ42

Secure identity and access

HOTSPOT —

You have an Azure key vault.

You need to delegate administrative access to the key vault and meet these requirements:

  • Provide a user named User1 the ability to configure advanced access policies for the key vault.
  • Provide a user named User2 the ability to add and delete certificates in the key vault.
  • Use the principle of least privilege.

What should you use to assign access to each user?

Select
User1:
User2:
Explanation

Azure RBAC controls Key Vault management-plane operations, including updating Key Vault properties and access policies. Certificate operations are data-plane operations; a Key Vault access policy can grant User2 only the Certificate Create and Delete permissions, which meets least privilege.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!