PrepAway - Latest Free Exam Questions & Answers

Which two actions should you perform?

You administer an Azure Active Directory (Azure AD) tenant that has a SharePoint web
application named TeamSite1. TeamSite1 accesses your Azure AD tenant for user
information.
The application access key for TeamSite1 has been compromised.
You need to ensure that users can continue to use TeamSite1 and that the compromised
key does not allow access to the data in your Azure AD tenant.
Which two actions should you perform? Each correct answer presents part of the solution.

PrepAway - Latest Free Exam Questions & Answers

A.
Remove the compromised key from the application definition for TeamSite1.

B.
Delete the application definition for TeamSite1.

C.
Generate a new application key for TeamSite1.

D.
Generate a new application definition for TeamSite1.

E.
Update the existing application key.

20 Comments on “Which two actions should you perform?

    1. Arie says:

      The answer is not correct. The correct answer is C and E.

      When an application key has been compromised, you have to regenerate it. When you have regenerated the application key, you should update your app with the new key value.




      0



      0
  1. Charles Perreault says:

    I would argue that the correct answer is A,C.

    It is said you don’t want the compromised key to allow accessing user data: you therefore need to remove it. Therefore A.

    And you clearly need to generate a new one, therefore C.

    While they mention you administer the AAD tenant and its application, nobody says you administer the Sharepoint web application. Updating the key in the client application is probably not up to you, and not relevant to this question.




    0



    0
  2. Charles Perreault says:

    I would argue that the correct answer is A,C.

    It is said you don’t want the compromised key to allow accessing user data: you therefore need to remove it. Therefore A.

    And you clearly need to generate a new one, therefore C.

    While they mention you administer the AAD tenant and its application, nobody says you administer the Sharepoint web application. Updating the key in the client application is probably not up to you, and not relevant to this question.




    0



    0
  3. chuck says:

    Answer is A,C.

    You need to ensure the compromised key does not allow to access the user data. The only way to do this is to remove it, therefore A.

    You need a generate a new key otherwise it will be impossible for the Sharepoint app to access the AAD tenant for user information, therefore C.

    While the question mentions that you administer an AAD tenant and its applications, nowhere does it mention that you also manage the Sharepoint site. This may well be left to another system administrator. This lead to think that updating the key in the Sharepoint web app is unrelated to this question and not our concern. Where I work, that would be the case.




    0



    0
  4. John says:

    “Update the connection strings in your application code to reference the secondary access key of the storage account.
    Regenerate the primary access key for your storage account. On the Access Keys blade, click Regenerate Key1, and then click Yes to confirm that you want to generate a new key.
    Update the connection strings in your code to reference the new primary access key.
    Regenerate the secondary access key in the same manner.”




    0



    0

Leave a Reply