AI-102 Question 76
Select 2You are developing an Azure AI application that uses a Cognitive Services resource. To enhance the security of the application, you want to ensure the account keys for the Cognitive Services resource are stored securely and accessed programmatically. Which of the following steps should you take to achieve this?
- A
Store the account keys in Azure Key Vault and grant your application access to the Key Vault via a managed identity.
- B
Hardcode the account keys directly in your application's source code for faster access.
- C
Use Azure Key Vault to securely store the account keys and retrieve them programmatically using Azure SDK.
- D
Grant the application full access to the Cognitive Services resource without using Azure Key Vault.
Show answer and explanation
Correct answers: A, C
Explanation
Storing account keys securely is critical for protecting sensitive resources. Azure Key Vault provides a secure mechanism for storing and accessing secrets like account keys. Using a managed identity ensures that only authorized applications can access these secrets, enhancing security. Hardcoding keys or bypassing Azure Key Vault introduces significant security vulnerabilities.
- A. Correct.
Correct. Storing the account keys in Azure Key Vault ensures secure storage, and using a managed identity restricts access to only authorized applications.
- B. Incorrect.
Incorrect. Hardcoding keys in application source code is a bad practice as it exposes sensitive information and increases security risks.
- C. Correct.
Correct. Azure Key Vault is designed to securely store secrets like account keys. The Azure SDK allows programmatic access to these keys in a secure manner.
- D. Incorrect.
Incorrect. Granting full access without using Azure Key Vault bypasses the security provided by Key Vault and increases the risk of unauthorized access.