312-97 practice question 25 of 35

(Kevin Ryan has been working as a DevSecOps engineer in an MNC company that develops various software products and web applications. For easy…

Full set: 100 questions
(Kevin Ryan has been working as a DevSecOps engineer in an MNC company that develops various software products and web applications. For easy management of secret credentials in CI/CD pipeline, he would like to integrate Azure Key Vault with Jenkins. Therefore, he created an Azure Key Vault, noted down the credentials displayed on the screen, and created a secret in Azure Key Vault. Then, he used the secret key from the credentials obtained from creating the vault. Kevin went back to Jenkins and installed Azure Key Vault plugin. Then, he navigated to Configure System under Manage Jenkins and added the URL for Azure Key Vault. How can Kevin complete the integration of Azure Key Vault with Jenkins?.)
Answer options
A: By modifying old credentials in Global Credentials (unrestricted).
B: By creating new credentials in Global Credentials (unrestricted). Correct answer
C: By creating new credentials in Global Credentials (restricted).
D: By modifying old credentials in Global Credentials (restricted).
Correct Answer:
B. By creating new credentials in Global Credentials (unrestricted).
Explanation

To complete the integration, Kevin must provide Jenkins with the credentials needed to authenticate to the Azure Key Vault. This is accomplished by creating a new credential entry within Jenkins's central credential store. He would navigate to "Manage Jenkins" -> "Manage Credentials" and add a new "Microsoft Azure Service Principal" credential in the "Global Credentials (unrestricted)" domain. This new credential object will store the service principal's ID, secret, and tenant ID, allowing the Azure Key Vault plugin to securely access the secrets stored in the vault on behalf of Jenkins jobs.

Why Incorrect

A. Modifying old credentials is incorrect; a new, distinct credential for the Azure service principal should be created for proper management.
C. While credentials can be restricted, the standard and initial setup typically uses the global, unrestricted domain for general access.
D. This is incorrect because it involves modifying existing credentials and assumes a restricted scope, neither of which is the standard procedure.

References

1. Microsoft Documentation. (2023). Use Azure Key Vault secrets in Jenkins pipelines. Azure for Jenkins. Retrieved from https://learn.microsoft.com/en-us/azure/jenkins/jenkins-key-vault-plugin. (The section "Add a service principal to your Jenkins credentials" explicitly details the steps to add new credentials in the global domain.)

2. Jenkins Project. (n.d.). Azure Key Vault Plugin. Jenkins Plugins. Retrieved from https://plugins.jenkins.io/azure-keyvault/. (The plugin's usage documentation outlines the prerequisite of configuring a service principal credential in Jenkins.)

Scroll to Top