ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 65 - AZ-204 discussion

Report
Export

You need to ensure the security policies are met.

What code do you add at line CS07 of ConfigureSSE.ps1?

A.
-PermissionsToKeys create, encrypt, decrypt
Answers
A.
-PermissionsToKeys create, encrypt, decrypt
B.
-PermissionsToCertificates create, encrypt, decrypt
Answers
B.
-PermissionsToCertificates create, encrypt, decrypt
C.
-PermissionsToCertificates wrapkey, unwrapkey, get
Answers
C.
-PermissionsToCertificates wrapkey, unwrapkey, get
D.
-PermissionsToKeys wrapkey, unwrapkey, get
Answers
D.
-PermissionsToKeys wrapkey, unwrapkey, get
Suggested answer: B

Explanation:

Scenario: All certificates and secrets used to secure data must be stored in Azure Key Vault.

You must adhere to the principle of least privilege and provide privileges which are essential to perform the intended function.

The Set-AzureRmKeyValutAccessPolicy parameter -PermissionsToKeys specifies an array of key operation permissions to grant to a user or service principal. The acceptable values for this parameter: decrypt, encrypt, unwrapKey, wrapKey, verify, sign, get, list, update, create, import, delete, backup, restore, recover, purge

Incorrect Answers:

A, C: The Set-AzureRmKeyValutAccessPolicy parameter -PermissionsToCertificates specifies an array of certificate permissions to grant to a user or service principal. The acceptable values for this parameter: get, list, delete, create, import, update, managecontacts, getissuers, listissuers, setissuers, deleteissuers, manageissuers, recover, purge, backup, restore

Reference:

https://docs.microsoft.com/en-us/powershell/module/azurerm.keyvault/set-azurermkeyvaultaccesspolicy

asked 02/10/2024
frederic Morteau
31 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first