Connection from applications in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of a connection string in Azure applications?

A connection string is a simple text that tells an application how to connect to a cloud service, like a database or storage. It includes information like the service address, credentials, and other settings.

beginner

How does Azure App Service securely store connection strings?

Azure App Service stores connection strings in its configuration settings, which are encrypted at rest and not visible in the application code. This keeps sensitive information safe and easy to update without changing the app.

intermediate

What is Managed Identity in Azure and how does it help application connections?

Managed Identity is like a special ID for your app that Azure creates and manages. It lets your app connect to other Azure services securely without needing to store passwords or keys.

beginner

Why should applications avoid hardcoding connection details?

Hardcoding connection details makes apps less secure and harder to update. If credentials change, you must change the code and redeploy. Using configuration or managed identities is safer and easier.

intermediate

What role does Azure Key Vault play in application connections?

Azure Key Vault securely stores secrets like passwords and keys. Applications can retrieve these secrets at runtime, keeping sensitive data out of code and configuration files.

What is the best way to manage database credentials for an Azure web app?

A Store them in Azure App Service configuration settings

B Hardcode them in the application code

C Send them in plain text over the network

D Write them on a paper and keep it near the server

Storing credentials in Azure App Service configuration settings keeps them secure and separate from code.

What does Managed Identity allow an Azure application to do?

A Automatically scale the app

B Connect to Azure services without storing credentials

C Run without internet connection

D Encrypt all data in the database

Managed Identity lets apps authenticate to Azure services securely without credentials in code.

Which Azure service is best for securely storing secrets like passwords?

A Azure Blob Storage

B Azure Functions

C Azure Key Vault

D Azure DevOps

Azure Key Vault is designed to securely store and manage secrets.

Why is hardcoding connection strings in application code discouraged?

A It is required by Azure

B It improves application speed

C It reduces the app size

D It makes updating credentials difficult and less secure

Hardcoding credentials risks security and complicates updates.

Where can you configure connection strings for an Azure App Service?

A In the App Service's Configuration blade in Azure Portal

B Inside the app's source code only

C In the Azure Monitor logs

D In the Azure DevOps pipeline

Azure Portal's Configuration blade allows secure management of connection strings.

Explain how an Azure application can securely connect to a database without storing passwords in code.

Think about Azure features that keep credentials safe and separate from code.

Describe the risks of hardcoding connection strings in applications and how Azure helps avoid them.

Consider what happens if credentials change or get stolen.