AI-200 Security And Observability Practice Question
You are auditing an Azure AI platform for security vulnerabilities. You want to ensure that secrets, connection strings, and certificates are handled in compliance with security best practices. Which THREE of the following practices should you enforce? (Choose three)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement automated secret rotation policies for API keys and service credentials.
Enforcing Key Vault soft-delete/purge protection, using managed identities, and rotating secrets regularly are key security practices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Implement automated secret rotation policies for API keys and service credentials.
Why this is correct
Correct. Regular rotation limits the impact of potential secret leakage.
- ✗
Commit production database passwords to public GitHub repositories for easy developer access.
Why it's wrong here
Incorrect. Committing secrets to public repositories compromises security immediately.
- ✗
Grant every employee administrator access to all Key Vault secrets.
Why it's wrong here
Incorrect. Broad secret access violates the principle of least privilege.
- ✓
Use managed identities instead of embedding static connection strings in application configuration files.
Why this is correct
Correct. Managed identities eliminate stored secrets entirely.
- ✓
Enable Key Vault soft-delete and purge protection to prevent accidental permanent deletion of secrets.
Why this is correct
Correct. Soft-delete and purge protection safeguard critical secrets against accidental or malicious permanent deletion.
About these practice questions
One of 503 original AI-200 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.