Subdomain 1.2: Create and manage assets in a Machine Learning workspace
1.You are automating the creation of datastores using the Azure ML CLI v2. You want to ensure that the credentials for the Azure SQL database datastore are securely stored and retrieved. Azure Machine Learning automatically stores these credentials in the ________ associated with the workspace.
- A.Azure Key Vault
- B.Azure Storage Account
- C.Azure Active Directory
Show answer & explanation
Correct answer: A — Azure Key Vault
- A. Correct. When an Azure Machine Learning workspace is created, an Azure Key Vault is automatically provisioned and associated with it. Azure ML uses this Key Vault to securely store secrets, including the credentials (such as service principal secrets, account keys, or SAS tokens) required to connect to datastores like Azure SQL Database.
- B. Incorrect. While an Azure Storage Account is a required resource for the workspace and can serve as a datastore itself, it is not used to store credentials or secrets. It is primarily used for storing data assets, model artifacts, and environment definitions.
- C. Incorrect. Azure Active Directory (now Microsoft Entra ID) is used for identity and access management (IAM) and authentication to the workspace. However, it is not a storage service for credentials such as database connection strings or secret keys; those are stored in the Key Vault.