Deploying Azure Environment with App Service and Storage Accounts
Question
To what should an application connect to retrieve security tokens?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.D
Key Vault is designed to store configuration secrets for server apps.
Incorrect Answers:
A: An Azure Storage account is used to store data. It is not used to store secrets for applications.
B: Azure Active Directory (Azure AD) is a centralized identity provider in the cloud that authenticates users and provides access tokens to them. It is not used for applications.
https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/2-what-is-key-vault https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overviewThe correct answer is B. Azure Active Directory (Azure AD).
Explanation:
Security tokens are used to authenticate and authorize access to Azure resources. These tokens contain information about the user, such as their identity and the permissions they have been granted.
Azure Active Directory (Azure AD) is the cloud-based identity and access management service provided by Microsoft. It is the primary authentication and authorization service used in Azure. Applications can connect to Azure AD to retrieve security tokens that allow users to access Azure resources.
Azure Storage account is a service that provides a fully managed cloud storage solution for data storage and retrieval. It is not used to retrieve security tokens.
A certificate store is a secure location for storing digital certificates that are used for authentication and encryption purposes. While certificates are important for secure communication, they are not directly used to retrieve security tokens.
Azure Key Vault is a cloud service that provides a secure store for keys, secrets, and certificates. It can be used to securely store and manage cryptographic keys and other sensitive information. While Azure Key Vault is important for security, it is not used to retrieve security tokens.
Therefore, the correct answer is B. Azure Active Directory (Azure AD).
