219k views
5 votes
Tool to use when you need to recommend an Azure solution that encrypts the administrative credentials during the deployment.

a) Azure Key Vault
b) Azure Policy
c) Azure Security Center
d) Azure Active Directory (AAD) Managed Service Identity (MSI)

User Gayathri
by
8.6k points

1 Answer

1 vote

Final answer:

The correct Azure solution for encrypting administrative credentials during deployment is Azure Key Vault, as it can securely manage and encrypt secrets, keys, and certificates using hardware security modules.

Step-by-step explanation:

The tool to use when you need to recommend an Azure solution that encrypts the administrative credentials during the deployment is Azure Key Vault. This service allows users to safeguard and manage cryptographic keys and other secrets used by cloud apps and services. By using Azure Key Vault, you can encrypt keys and secrets (such as certificates, connection strings, and passwords) by using keys that are protected by hardware security modules (HSMs). This ensures that administrative credentials are securely encrypted when deploying resources in Azure.

Azure Policy helps enforce organizational standards and to assess compliance at-scale, but it is not designed for secret storage. Azure Security Center provides unified security management and advanced threat protection, which is not specific to managing administrative credentials. Azure Active Directory (AAD) Managed Service Identity (MSI) serves to eliminate the need for developers to manage credentials, but does not provide encryption services for deployment.

User Tomasz Grobelny
by
8.5k points