Question 490
At Maplewood Schools, the district applications data team maintains a school enrolment and student services platform with requirements for strict privacy and dependable term-start access. The operations owner asks for a validation result for: A database infrastructure template hardcodes production connection passwords in a parameter file committed to the repository. Which observed result BEST proves the intended problem is corrected?
Explanation
Correct Answer
The deployed database works through its authorized secret source and no reusable database password exists in the reviewed repository. That observable result supports resolution of: A database infrastructure template hardcodes production connection passwords in a parameter file committed to the repository. The corresponding corrective change is: Remove plaintext secrets and reference supported secure parameter or key-store mechanisms with scoped deployment identities. The Maplewood Schools reviewer can distinguish demonstrated database behavior from an untested change claim.
Incorrect Answers
A deliberately failed dependency causes the pipeline to fail and a corrected deployment passes private DNS and SQL connection tests. That result is evidence for another corrective change: Monitor operation status and nested deployment errors, then require health and connectivity checks before declaring the release successful. The alternative problem is: An Azure resource deployment is recorded as finished even though a dependent private endpoint and DNS zone association failed. The current Maplewood Schools issue is instead: A database infrastructure template hardcodes production connection passwords in a parameter file committed to the repository. Its decisive acceptance evidence would be: The deployed database works through its authorized secret source and no reusable database password exists in the reviewed repository.
The CLI execution log identifies the correct target ID and the unchanged comparison subscription passes a post-run inventory check. That result is evidence for another corrective change: Set and verify the intended tenant, subscription, resource group and resource identifier before each Azure CLI deployment. The alternative problem is: An Azure CLI deployment script succeeds in one subscription but modifies a similarly named database in another because its context is implicit. The current Maplewood Schools issue is instead: A database infrastructure template hardcodes production connection passwords in a parameter file committed to the repository. Its decisive acceptance evidence would be: The deployed database works through its authorized secret source and no reusable database password exists in the reviewed repository.
The automation scales only the intended SQL resource and a test request against a protected neighboring resource is denied. That result is evidence for another corrective change: Use an appropriate automation identity and narrowly scoped Azure PowerShell commands to apply approved resource changes. The alternative problem is: An administrator runs Azure PowerShell under a personal account with excessive rights for a recurring database scale adjustment. The current Maplewood Schools issue is instead: A database infrastructure template hardcodes production connection passwords in a parameter file committed to the repository. Its decisive acceptance evidence would be: The deployed database works through its authorized secret source and no reusable database password exists in the reviewed repository.