Question

you plan to deploy multiple windows server virtual machines (vms) to several virtual networks in azure by using an azure resource manager (arm) template. your security mandates that the local administrator password is never exposed in plaintext. what is a recommended course of action? a define a variable in the vm. b deploy the custom script extension along with the storage account. c store the password in azure key vault. d store the template to source code control.

Explanation:

To avoid exposing the local administrator password in plaintext when deploying VMs via an ARM template, Azure Key Vault is designed to securely store secrets like passwords. Option A (defining a variable in the VM) doesn't address security for plaintext exposure. Option B (custom script extension with storage account) isn't for password security. Option D (storing template in source code control) also doesn't protect the password from being plaintext. Storing in Key Vault ensures the password is encrypted and accessed securely.

Answer:

C. Store the password in Azure Key Vault.