Link the Key Vault to a Variable Group in Pipelines. Follow: Example (YAML): variables: - group: 'KeyVaultSecrets' steps: - script: echo "Using secret value..." env: StorageKey: $(StorageKey) Example scenario: When your pipeline runs, Azure DevOps automatically retrieves secrets from Key Vault. If a secret changes, you don’t have to update your YAML — the latest version is always used. 3⃣ How do you handle identity and access management for build agents?

Short answer: Each build or release agent runs under a specific identity that needs permissions to deploy or access resources. Best practices: Use Managed Identity for self-hosted agents (so no credentials are stored).

Real-world example (ShopNest)

ShopNest’s YAML pipeline builds on every PR, runs unit tests, then deploys to a staging slot on main-branch merges.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.