Home › Azure AZ-204 › cloudcomputing › az204security › Which configuration lets an Azure Function acces…
Which configuration lets an Azure Function access a SECRET stored in Key Vault via an App Setting reference (e.g. `@Microsoft.KeyVault(SecretUri=...)`), refreshed automatically when rotated?
AStoring the secret in a public bucket and downloading at runtime
BManually re-deploying the function every time the secret rotates
CHardcoding the secret value in code
DKey Vault references in App Service / Functions configuration
Answer & Solution
Correct answer: D. Key Vault references in App Service / Functions configuration
Key Vault references resolve at runtime by URI; rotations propagate via app restart or scheduled refresh. The other options leak secrets or destroy automation.
Related questions
Which Azure feature continuously scans App Service / Function code for known vulnerabilitiWhich type of Microsoft Identity token does a client present to a downstream API to prove An Azure Function needs to read a secret from Key Vault on every cold start. What's the MOAn Azure Web App needs to authenticate users with Entra ID without writing OAuth code. WhiWhich Azure feature lets an admin grant a role assignment that's only ACTIVE for an approvWhich Azure feature lets a developer call `DefaultAzureCredential` from the Azure SDK and Which configuration gives an Azure VM, App Service, or Function App an identity to call KeWhich Azure service handles consumer/customer-facing identity (B2C) — sign-in for end user