Developing Solutions for Microsoft Azure — Question 25

You are developing an e-Commerce Web App.
You want to use Azure Key Vault to ensure that sign-ins to the e-Commerce Web App are secured by using Azure App Service authentication and Azure Active
Directory (AAD).
What should you do on the e-Commerce Web App?

Answer options

• A. Run the az keyvault secret command.
• B. Enable Azure AD Connect.
• C. Enable Managed Service Identity (MSI).
• D. Create an Azure AD service principal.

Correct answer: C

Explanation

The correct option is C, as enabling Managed Service Identity (MSI) allows the e-Commerce Web App to authenticate to Azure services, including Azure Key Vault, without needing credentials. Options A, B, and D do not directly provide the necessary authentication mechanism for the app to securely access Azure Key Vault.