Correct Answer: Store secrets in Azure Key Vault and use the Azure App Configuration provider or Key Vault references in App Service application settings to inject them at runtime
Azure Key Vault References allow App Service and Azure Functions to reference secrets stored in Key Vault directly in application settings (using @Microsoft.KeyVault(...) syntax). ...
Correct Answer
Store secrets in Azure Key Vault and use the Azure App Configuration provider or Key Vault references in App Service application settings to inject them at runtime
Why This Answer Is Correct
Azure Key Vault References allow App Service and Azure Functions to reference secrets stored in Key Vault directly in application settings (using @Microsoft.KeyVault(...) syntax). The application receives the resolved secret value at runtime without any code changes.
This question evaluates your knowledge of Azure Key Vault — a core concept tested in Microsoft Certified: Azure Developer Associate (AZ-204). Understanding Azure Key Vault is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
A solutions architect needs to store application connection strings and API keys securely. Which service should they use?
What is the difference between a 'Secret' and a 'Key' in Azure Key Vault?
An administrator wants to manage access to a Key Vault using Azure RBAC (Role-Based Access Control) instead of legacy Access Policies. Is this possible?
What is the 'Soft Delete' feature in Azure Key Vault for?