Your company has a project in Azure DevOps for a new web application.
The company identifies security as one of the highest priorities.
You need to recommend a solution to minimize the likelihood that infrastructure credentials will be leaked.
What should you recommend?
A. Add a Run Inline Azure PowerShell task to the pipeline.
B. Add a PowerShell task to the pipeline and run Set-AzureKeyVaultSecret.
C. Add a Azurre Key Vault task to the pipeline.
D. Add Azure Key Vault references to Azure Resource Manger templates.
D is correct refer this
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-use-key-vault
I think answer should be below:
C. Add a Azurre Key Vault task to the pipeline.
B? not C? Set-AzureKeyVaultSecret requires a secret value be a parameter (means secret is presented in clear text). KeyVault task is to download secret by name without knowing value itself.