ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 301 - AZ-400 discussion

Report
Export

HOTSPOT

You have an Azure subscription that contains the resources shown in the following table.

You plan to create a linked service in DF1. The linked service will connect to SQL1 by using Microsoft SQL Server authentication. The password for the SQL Server login will be stored in KV1.

You need to configure DF1 to retrieve the password when the data factory connects to SQL1. The solution must use the principle of least privilege.

How should you configure DF1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 301
Correct answer: Question 301

Explanation:

Box 1: Secret

Store credential in Azure Key Vault by reference secret stored in key vault.

To reference a credential stored in Azure Key Vault, you need to:

1. Retrieve data factory managed identity

2. Grant the managed identity access to your Azure Key Vault. In your key vault -> Access policies -> Add Access Policy, search this managed identity to grant Get permission in Secret permissions dropdown. It allows this designated factory to access secret in key vault.

3. Create a linked service pointing to your Azure Key Vault.

4. Create data store linked service, inside which reference the corresponding secret stored in key vault. Box 2: Access policy

Reference: https://docs.microsoft.com/en-us/azure/data-factory/store-credentials-in-key-vault

asked 02/10/2024
Steve Nihan
39 questions
User
0 comments
Sorted by

Leave a comment first