Storing secrets in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of Azure Key Vault?

Azure Key Vault is a service that securely stores and controls access to secrets like passwords, API keys, and certificates.

beginner

How does Azure Key Vault help improve application security?

It keeps secrets out of application code and configuration files, reducing the risk of accidental exposure.

beginner

What is a secret in the context of Azure Key Vault?

A secret is any sensitive information such as passwords, connection strings, or API keys stored securely in Key Vault.

intermediate

Which Azure service identity is recommended to access Key Vault securely without storing credentials in code?

Managed Identity allows Azure resources to authenticate to Key Vault without storing credentials in code.

intermediate

What is the best practice for rotating secrets stored in Azure Key Vault?

Regularly update and replace secrets to reduce risk if a secret is compromised, and automate rotation when possible.

What is the main benefit of using Azure Key Vault for secrets?

A It manages virtual machines

B It automatically writes application code

C It hosts websites

D It stores secrets securely and controls access

Azure Key Vault is designed to securely store secrets and manage access to them.

Which method allows Azure resources to access Key Vault without storing credentials in code?

A Managed Identity

B Shared Access Signature

C API Key in code

D Username and password

Managed Identity provides secure authentication without embedding credentials.

What type of information is typically stored as a secret in Azure Key Vault?

A Public website content

B Passwords and API keys

C Virtual machine images

D User profile pictures

Secrets include sensitive data like passwords and API keys.

Why should secrets be rotated regularly in Azure Key Vault?

A To reduce risk if secrets are compromised

B To improve application speed

C To save storage space

D To increase network bandwidth

Regular rotation limits the impact of leaked secrets.

Which of the following is NOT a feature of Azure Key Vault?

A Secure storage of secrets

B Access control policies

C Automatic code deployment

D Integration with Azure services

Azure Key Vault does not deploy code automatically.

Explain how Azure Key Vault helps keep application secrets safe.

Think about how secrets are stored and accessed securely.

Describe best practices for managing secrets in Azure Key Vault.

Focus on security and maintenance steps.