QUESTION: 47 Exam Topic: Implement Azure security questions

You are developing an Azure Function that calls external APIs by providing an access token for the API. The access token is stored in a secret named token in an Azure Key Vault named mykeyvault.

You need to ensure the Azure Function can access to the token. Which value should you store in the Azure Function App configuration?

KeyVault:mykeyvault;Secret:token
App:Settings:Secret:mykeyvault:token
AZUREKVCONNSTR_ https://mykeyveult.vault.ezure.net/secrets/token/
@Microsoft.KeyVault(SecretUri=https://mykeyvault.vault.azure.net/secrets/token/)

Answer(s): D

Explanation:

Add Key Vault secrets reference in the Function App configuration.
Syntax: @Microsoft.KeyVault(SecretUri={copied identifier for the username secret})

Reference:

https://daniel-krzyczkowski.github.io/Integrate-Key-Vault-Secrets-With-Azure-Functions/

Reveal Solution Next Question

QUESTION: 48 Exam Topic: Implement Azure security questions

A company maintains multiple web and mobile applications. Each application uses custom in-house identity providers as well as social identity providers.

You need to implement single sign-on (SSO) for all the applications.
What should you do?

Use Azure Active Directory B2C (Azure AD B2C) with custom policies.
Use Azure Active Directory B2B (Azure AD B2B) and enable external collaboration.
Use Azure Active Directory B2C (Azure AD B2C) with user flows.
Use Azure Active Directory B2B (Azure AD B2B).

Answer(s): B

Explanation:

You can add Google as an identity provider for B2B guest users.

Federation with SAML/WS-Fed identity providers for guest users.
Make sure your organization's external collaboration settings are configured such that you're allowed to invite guests.

Note 1: As a user who is assigned any of the limited administrator directory roles, you can use the Azure portal to invite B2B collaboration users. You can invite guest users to the directory, to a group, or to an application. After you invite a user through any of these methods, the invited user's account is added to Azure Active Directory (Azure AD), with a user type of Guest.

Note 2: Direct federation in Azure Active Directory is now referred to as SAML/WS-Fed identity provider (IdP) federation.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/external-identities/google-federation
https://docs.microsoft.com/en-us/azure/active-directory/external-identities/add-users-administrator

Reveal Solution Next Question

QUESTION: 49 Exam Topic: Implement Azure security questions

You develop a Python application for image rendering that uses GPU resources to optimize rendering processes. You deploy the application to an Azure Container Instances (ACI) Linux container.

The application requires a secret value to be passed when the container is started. The value must only be accessed from within the container.

You need to pass the secret value.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Create an environment variable Set the secureValue property to the secret value.
Add the secret value to the container image. Use a managed identity.
Add the secret value to the application code Set the container startup command.
Add the secret value to an Azure Blob storage account. Generate a SAS token.
Mount a secret volume containing the secret value in a secrets file.

Answer(s): A,E

Explanation:

A: Secure environment variables
Another method (another than a secret volume) for providing sensitive information to containers (including Windows containers) is through the use of secure environment variables.

E: Use a secret volume to supply sensitive information to the containers in a container group. The secret volume stores your secrets in files within the volume, accessible by the containers in the container group. By storing secrets in a secret volume, you can avoid adding sensitive data like SSH keys or database credentials to your application code.

Reference:

https://docs.microsoft.com/en-us/azure/container-instances/container-instances-volume-secret

Reveal Solution Next Question

QUESTION: 50 Exam Topic: Implement Azure security questions

You are developing a user portal for a company.

You need to create a report for the portal that lists information about employees who are subject matter experts for a specific topic. You must ensure that administrators have full control and consent over the data.

Which technology should you use?

Microsoft Graph data connect
Microsoft Graph API
Microsoft Graph connectors

Answer(s): A

Explanation:

Data Connect grants a more granular control and consent model: you can manage data, see who is accessing it, and request specific properties of an entity. This enhances the Microsoft Graph model, which grants or denies applications access to entire entities.

Microsoft Graph Data Connect augments Microsoft Graph’s transactional model with an intelligent way to access rich data at scale. The data covers how workers communicate, collaborate, and manage their time across all the applications and services in Microsoft 365.

Incorrect:
Not B: The Microsoft Graph API is a RESTful web API that enables you to access Microsoft Cloud service resources. After you register your app and get authentication tokens for a user or service, you can make requests to the Microsoft Graph API.

A simplistic definition of a Graph API is an API that models the data in terms of nodes and edges (objects and relationships) and allows the client to interact with multiple nodes in a single request.

Not C: Microsoft Graph connectors, your organization can index third-party data so that it appears in Microsoft Search results.
With Microsoft Graph connectors, your organization can index third-party data so that it appears in Microsoft Search results.

Reference:

https://docs.microsoft.com/en-us/graph/data-connect-concept-overview

Reveal Solution Next Question

Free AZ-204 Exam Braindumps (page: 34)

QUESTION: 47 Exam Topic: Implement Azure security questions

Explanation:

Reference:

QUESTION: 48 Exam Topic: Implement Azure security questions

Explanation:

Reference:

QUESTION: 49 Exam Topic: Implement Azure security questions

Explanation:

Reference:

QUESTION: 50 Exam Topic: Implement Azure security questions

Explanation:

Reference: