BenchMark Quizzes by MDFT Pro

Reference Azure Key Vault Secrets in a Build Pipeline

You work at MDFT Pro, which has an Azure DevOps organization named MDFT that contains a project named CourseBuilder.

Your team has provisioned an Azure key vault named TrainingSecrets to store sensitive information used in your training applications. This key vault contains database connection strings, API keys, and other credentials that should not be stored directly in your source code or pipeline configuration.

You are working with Mark, the DevOps lead, on implementing a CI/CD pipeline for the new student assessment application. The application needs to access several sensitive configuration values during both build and deployment processes.

You need to reference the TrainingSecrets vault’s secrets in a build pipeline of CourseBuilder in a secure way that follows DevOps best practices. What should you do first?

Choose the correct answer from the options below.

Explanations for each answer:

Create a XAML build service is incorrect. XAML build services are legacy build systems. Azure Pipelines uses YAML or classic editor pipelines, not XAML, for modern build processes.
Create a variable group in CourseBuilder and link it to Azure Key Vault is correct.
Add a secure file to CourseBuilder is incorrect. Secure files in Azure DevOps are used to store binary files like certificates, not to reference Key Vault secrets in a build pipeline.
Configure the security policy of MDFT Pro is incorrect. While security policies are important, they don't enable referencing Key Vault secrets in build pipelines. This is managed through variable groups linked to Key Vault.

Learn more about linking variable groups to Azure Key Vault:

Link Variable Group To Azure Key Vault

Exam Preparation Quiz

Reference Azure Key Vault Secrets in a Build Pipeline