Câu 34: AZ-304: Microsoft Azure Architect Design

You are designing an Azure resource deployment that will use Azure Resource Manager templates. The deployment will use Azure Key Vault to store secrets. You need to recommend a solution to meet the following requirements: ✑ Prevent the IT staff that will perform the deployment from retrieving the secrets directly from Key Vault. ✑ Use the principle of least privilege. Which two actions should you recommend? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

1. A. Create a Key Vault access policy that allows all get key permissions, get secret permissions, and get certificate permissions.
2. B. From Access policies in Key Vault, enable access to the Azure Resource Manager for template deployment. — đáp án hiện tại
3. C. Create a Key Vault access policy that allows all list key permissions, list secret permissions, and list certificate permissions.
4. D. Assign the IT staff a custom role that includes the Microsoft.KeyVault/Vaults/Deploy/Action permission. — đáp án hiện tại
5. E. Assign the Key Vault Contributor role to the IT staff.