Encrypting Credentials During Azure Deployment
Describe Azure identity, access, and security
Answer
Correct answer: B — Azure Key Vault is required to securely store and encrypt administrative credentials, whereas Azure Information Protection only classifies and labels documents and emails.
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. You have been informed by your superiors of the company's intentions to automate server deployment to Azure. There is, however, some concern that administrative credentials could be uncovered during this process. You are required to make sure that during the deployment, the administrative credentials are encrypted using a suitable Azure solution. Solution: You recommend the use of Azure Information Protection. Does the solution meet the goal?
Community Insight
The question tests knowledge of Azure security services, specifically the trap of confusing content protection (AIP) with secret storage (Key Vault).
This question evaluates the correct Azure service for securing administrative credentials during server automation. It clarifies that Azure Key Vault, not Azure Information Protection, is the appropriate solution for secret management.
Learners often select 'Yes' because they associate Azure Information Protection with general data security, failing to distinguish between protecting documents and managing deployment secrets.
Community Discussion (52 comments)
Aksmohan
👍 1
Selected: B
Azure Key Vault should be the right option
leonildo_a_l
👍 2
Selected: B
Solução correta é o uso da Azure Key Vault. A caixa de segredos do Azure, onde pode-se guardar credenciais de forma segura.
AlekksMaciel
👍 1
Selected: B
A resposta é Não
kahla
👍 3
Selected: B
Azure Information Protection is for protecting documents and emails, not for securing administrative credentials in deployment processes. To ensure credentials are encrypted and securely managed during server deployment, Azure Key Vault should be used.
beepic
👍 1
Selected: B
No , the answer of this question could be Azure Key Vault , Azure Information Protection (AIP) is a solutions that enables organizations to classfiy and protect documents and emails by adding labels to the content
deyson
👍 1
Selected: B
No, this is a great example to use Azure Key-Vaults
arjunyv2022
👍 1
Selected: B
Azure Information Protection is not meant for securing administrative credentials, the solution does not meet the goal. The correct approach is to use Azure Key Vault or Managed Identities for secure credential management.
ElPitu97
👍 2
Selected: B
Key Vault
Attar
👍 1
Selected: B
... Correct B
alyssonmsa2
👍 1
Selected: B
Azure Key Valt
omsdigital
👍 1
Selected: B
Answer is no and fyi Azure Information Protection is retired now - in outlook and all microsoft suits they now have a way to classify documents if its sensitive - public etc.
8eb0701
👍 1
Selected: B
The correct answer here will be Azure Key Vault
Umesh919
👍 1
Selected: B
Answer is NO
Guliyevagil0
👍 1
Selected: B
Answer is No
zswap
👍 1
No, the solution does not meet the goal. Azure Information Protection is primarily used for classifying, labeling, and protecting documents and emails, but it is not specifically designed for encrypting administrative credentials during deployment. For securely encrypting administrative credentials during server deployment, Azure Key Vault should be used.
Shruti2024
👍 1
Selected: B
Should be Key Vault
ZNL
👍 1
Answer is no
intentando
👍 1
Selected: B
B
AntonioTech
👍 20
Selected: B
B. No Azure Information Protection is primarily used for classifying, labeling, and protecting documents and emails containing sensitive information. It's not designed for encrypting administrative credentials during server deployment processes. For encrypting administrative credentials during server deployment to Azure, a more suitable solution would be to use Azure Key Vault. Azure Key Vault is a cloud service that allows you to safeguard cryptographic keys, certificates, and secrets used by cloud applications and services. You can store the administrative credentials securely in Azure Key Vault and retrieve them when needed during the deployment process. This ensures that the credentials are properly protected and managed.
tyhtyhtyh
👍 4
Selected: B
Azure Key Vault is a cloud service for securely storing and accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, or cryptographic keys. https://learn.microsoft.com/en-us/azure/key-vault/general/basic-concepts -- Azure Information Protection (AIP) is part of Microsoft Purview Information Protection (formerly Microsoft Information Protection or MIP). Microsoft Purview Information Protection helps you discover, classify, protect, and govern sensitive information wherever it lives or travels. https://learn.microsoft.com/en-us/azure/information-protection/what-is-information-protection
morpheusbn
👍 1
Selected: B
Keyword is: to automate server DEPLOYMENT to Azure. Answer is A
Zaidsdb
👍 1
Selected: B
the answer is B because the other is more secuity then automate
Kanders
👍 4
B. No - does not meet goal. Azure Key Vault is the correct solution.
buiducvu
👍 2
Selected: B
B. No, answer -> Key Vault
NOTEBOOK_789
👍 4
Selected: B
Key vault encrypt the data. So the answer should be no
no_NickName_01
👍 1
Selected: B
Key Vault
manraj
👍 1
Selected: B
kEY VAULT .... AIP WRONG ANSWER
rameshsee
👍 1
Selected Answer: B
qingyingsu
👍 3
should is Key-Vault
dkiaidoo
👍 3
Key Vault
AWSum1
👍 4
Selected: B
Key Vault
shadeey
👍 4
Correct, Encryption solution => Azure Key Vault.
abelk
👍 1
Answer is correct
Sam_333
👍 1
Azure Key vault
Mouhammad1
👍 3
AIP only for email and documents
maysonazure
👍 7
Azure INFORMATION protection protects content, not passwords.
jgalanj
👍 4
key word = concern that administrative credentials could be uncovered during this process = Key Vault
toxicater
👍 10
What if I AM a robot?
AlbertKwan
👍 1
so comment moderation is broken!
chop_z_azur
👍 4
Then why you robot are preparing for Azur exam ? You should already know the answers !
SyedAadRazaDevops
👍 1
The Azure Information Protection tenant key is a root key for your organization. Other keys can be derived from this root key, including user keys, computer keys, or document encryption keys
Chioma
👍 1
No because that will not be enough protection
Dasiya
👍 80
Correct answer is B. Solution : Azure Key Vault
RaySmith
👍 1
Answer is: B
alexleonvalencia
👍 6
La respuesta correcta es B, ya que Azure Information Protection sirve para proteger información que concierne a Documentos y Correos.
nirbabu
👍 1
correct
CassarJ
👍 3
Answer is correct. Key vaults are recommended to secure secrets /encrypt keys
BinuRaj
👍 3
Azure Information Protection (AIP) is a cloud-based solution that enables organizations to discover, classify, and protect documents and emails by applying labels to content.
Petergrayston
👍 3
Correct. The best solution is Azure Key Vault
iwarakorn
👍 98
Answer is No Azure Information Protection (AIP) is a cloud-based solution that enables organizations to discover, classify, and protect documents and emails by applying labels to content.
Jas001
👍 2
yeah, it is to protect documents to apply labels to them that further allows which internal and external users.
Said Ismail
👍 2
Selected: B
Azure Information Protection is for protecting documents and emails, not for securing administrative credentials in deployment processes. To ensure credentials are encrypted and securely managed during server deployment, Azure Key Vault should be used.
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Azure Key Vault is the dedicated service for securely storing and accessing secrets such as API keys, passwords, certificates, or cryptographic keys. Since the goal is to encrypt and protect administrative credentials used during automated server deployment, Key Vault provides the necessary managed access and encryption capabilities. Therefore, recommending Azure Information Protection does not meet the requirement.Why the Other Options Are Wrong
Azure Information Protection (AIP) is designed to classify, label, and protect sensitive information within documents and emails. It focuses on data loss prevention and persistent protection of content files rather than the secure storage and retrieval of credentials or secrets for infrastructure-as-code or deployment scripts. Using AIP for this purpose would be architecturally incorrect and ineffective.Community Comment Notes
Community consensus strongly supports option B, with multiple users noting that AIP protects content like documents and emails, not passwords. Users frequently cite Azure Key Vault as the correct alternative, emphasizing its role in tightly controlling access to secrets. One comment explicitly states, "Azure INFORMATION protection protects content, not passwords," highlighting the key distinction.Official Reference
Exam Strategy
When a question involves automating deployments or managing secrets, immediately consider Azure Key Vault. Do not confuse it with services focused on data classification or document labeling like AIP or Purview.
Frequently Asked Questions
Why is Azure Information Protection wrong for credentials?
AIP protects static content like documents and emails via labeling. It does not provide the dynamic secret management needed for deployment automation.
What Azure service manages secrets for automation?
Azure Key Vault is the standard service for storing and managing secrets, keys, and certificates securely for applications and deployments.
Related Analysis
Practice All AZ-900 Questions
Access 90 questions with complete answers and detailed explanations.
View Full AZ-900 Practice Test →