Microsoft Azure Developer Associate AZ-204 Practice Question

You deploy an Azure App Service web app that must retrieve a connection string stored in Azure Key Vault during startup. You will use the Azure.Identity DefaultAzureCredential class in the application code. Before redeploying the code, which Azure portal action should you perform to make the retrieval succeed without client secrets?

  • Add the web app's outbound IP addresses to the Key Vault firewall and virtual networks settings.

  • Create a shared access signature (SAS) for the Key Vault and configure the web app to use the SAS token.

  • Enable a system-assigned managed identity for the web app and add an access policy in the Key Vault granting that identity Get and List secret permissions.

  • Register a new application in Microsoft Entra ID, generate a client secret, and store the secret in the web app's application settings.

Microsoft Azure Developer Associate AZ-204
Implement Azure security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot