Match each Azure security feature to its description.
Drag a concept onto its matching description — or click a concept then click the description.
Role-based access control for Azure resources
Cloud-based identity and access management service
Manage cryptographic keys and secrets
Private connectivity to Azure services over VNet
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Azure Active Directory: A cloud-based identity and access management service that provides authentication and authorization.
The correct matches are: Azure AD for identity and access management, Key Vault for secrets management, RBAC for fine-grained access control, and Managed Identity for automatically managed identities. Common confusions include swapping Azure AD with Managed Identity and Key Vault with RBAC.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Azure Active Directory: A cloud-based identity and access management service that provides authentication and authorization.
Why this is correct
Azure AD is Microsoft's cloud-based identity and access management service.
Azure Key Vault: A service for securely storing and managing secrets, encryption keys, and certificates.
Why this is correct
Azure Key Vault is used to safeguard cryptographic keys and secrets.
Azure RBAC: An authorization system that provides fine-grained access management for Azure resources.
Why this is correct
Azure RBAC enables role-based access control for Azure resources.
Azure Managed Identity: An identity automatically managed by Azure that allows applications to access Azure resources without needing to manage credentials.
Why this is correct
Managed Identity provides an automatically managed identity in Azure AD for applications.
Azure Active Directory: An automatically managed identity in Azure AD for applications to connect to resources without managing credentials.
Why it's wrong here
Incorrect — this describes Azure Managed Identity, not Azure AD.
Azure Key Vault: A service that provides role-based access control for Azure resources.
Why it's wrong here
Incorrect — this describes Azure RBAC, not Azure Key Vault.
Quick reference
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
About these practice questions
Courseiva writes every DP-203 question from scratch — 760 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.