Q31 Key Vault Domain 4 · 20–25% of exam Priority · Real Exam

Which capability lets AKS pods consume Key Vault secrets as mounted files?

  1. A The Secrets Store CSI Driver with the Azure Key Vault provider (correct answer)
  2. B ConfigMaps
  3. C An init container calling the REST API
  4. D Azure Files

Shortcut: The CSI driver mounts secrets as a volume and can optionally sync them into Kubernetes Secrets, authenticating with workload identity or a user-assigned identity.