AZ-204 Azure Security & Identity

Question 1

Which Azure service allows an application to retrieve secrets without storing credentials in code or configuration files?

Accepted Answer

Azure Key Vault

Answer

Azure Active Directory B2C

Answer

Azure Security Center

Answer

Azure Policy

Question 2

What type of Managed Identity is automatically created and tied to the lifecycle of a specific Azure resource?

Accepted Answer

System-assigned managed identity

Answer

User-assigned managed identity

Answer

Service principal

Answer

Application identity

Question 3

Which OAuth 2.0 flow should a daemon application use to acquire an Azure AD token when acting on its own behalf with no user interaction?

Accepted Answer

Client Credentials flow

Answer

Authorization Code flow

Answer

Implicit flow

Answer

On-Behalf-Of flow

Question 4

What is the recommended way to allow an Azure App Service to read secrets from Azure Key Vault without managing credentials?

Accepted Answer

Use a Key Vault reference with a system-assigned managed identity

Answer

Store the Key Vault access key in App Settings

Answer

Pass the client secret via environment variable

Answer

Use a service principal with a certificate in App Settings

Question 5

Which Azure AD feature allows you to require multi-factor authentication for users accessing specific applications based on risk signals?

Accepted Answer

Conditional Access

Answer

Azure AD Identity Protection

Answer

Privileged Identity Management

Answer

Azure AD B2B

Question 6

Which role in Azure RBAC provides read-only access to Azure Key Vault secrets?

Accepted Answer

Key Vault Secrets User

Answer

Key Vault Contributor

Answer

Key Vault Secrets Officer

Answer

Key Vault Reader