Microsoft · AZ-305
Authorization and secrets
AZ-305 · Lesson 2 of 13 · 9:28
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-305 exam (Microsoft Azure Solutions Architect Expert). In this lesson: designing authorization and secrets: Azure RBAC with least privilege, attribute-based access control conditions and Privileged Identity Management, access to on-premises apps with Microsoft Entra application proxy and Microsoft Entra Private Access, Azure Key Vault Standard and Premium and Managed HSM (FIPS 140-3 level 3), the RBAC permission model, soft delete, purge protection, key rotation and network restrictions for vaults. Includes three original practice questions.
Preview the topics
- Remote employees need an on-premises web app, with multifactor authentication. Security refuses any inbound firewall rule, and the company wants the least infrastructure. What should the architect recommend?
- A bank needs encryption keys in hardware security modules that only its own tenant uses, with full control of the security domain. Which service fits?
- Storage accounts use customer-managed keys from Key Vault. A rogue administrator could delete the key and purge it at once, making the data unreadable. What prevents that?