Key Vault Access Policies and RBAC Quiz

What you'll be asked

1. Which of the following is the recommended best practice for granting access to Azure Key Vault secrets, keys, and certificates?
2. You have an application running on an Azure Virtual Machine that needs to retrieve a secret from Key Vault. What is the most secure way to authenticate the application?
3. When configuring Azure RBAC for Key Vault, which role provides the minimum permissions necessary for an application to read a secret without the ability to delete or update it?
4. A developer reports that they have the 'Key Vault Secrets User' role assigned, but they are still receiving an 'Access Denied' error when trying to retrieve a secret. What is the most likely cause?
5. You are migrating from Key Vault Access Policies to Azure RBAC. If a Key Vault is configured with 'Vault access policy' as the permission model, what must occur before you can assign roles using Azure RBAC?

Answers and explanations come after you submit.