AI-102 Question 74
Select 4Your company uses Azure Cognitive Services and stores sensitive data in Azure Storage accounts. To enhance security, you are tasked with managing the access keys for an Azure Storage account used by an AI solution. Which of the following actions should you take to ensure secure key management?
- A
Rotate the account keys periodically to reduce the risk of unauthorized access.
- B
Store the account keys in Azure Key Vault and retrieve them dynamically during runtime.
- C
Embed the account keys directly in your AI solution's source code to simplify access.
- D
Regenerate the account keys immediately if you suspect they have been compromised.
- E
Use system-assigned managed identities for secure access instead of account keys when possible.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Account key management is a critical aspect of securing Azure resources. Best practices include rotating keys periodically, using Azure Key Vault for secure storage, and avoiding insecure practices like embedding keys in source code. Additionally, managed identities provide a secure alternative to using account keys altogether, helping to simplify and strengthen security.
- A. Correct.
Rotating the account keys periodically is a best practice to minimize the risk of unauthorized access.
- B. Correct.
Storing account keys in Azure Key Vault ensures they are managed securely and accessible only to authorized applications.
- C. Incorrect.
Embedding account keys in source code is a bad practice as it exposes sensitive information to potential threats, such as code leaks.
- D. Correct.
Regenerating account keys if they are suspected to be compromised is essential to prevent unauthorized access.
- E. Correct.
Using system-assigned managed identities allows for secure access without needing to use account keys, providing a more secure alternative.