Q36 Functions Domain 3 · 20–25% of exam

Which Azure Functions feature allows accessing Azure Key Vault secrets in app settings without code changes?

  1. A Key Vault binding
  2. B Key Vault References in App Settings (@Microsoft.KeyVault(...)) (correct answer)
  3. C Manual SDK integration only
  4. D Managed Identity + MSAL

Shortcut: ) directly in App Settings. The runtime resolves the secret automatically using the function's managed identity.

Key Vault References use the syntax @Microsoft.KeyVault(VaultName=...,SecretName=...) directly in App Settings. The runtime resolves the secret automatically using the function's managed identity.