Azure Key Vault · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
A company requires that deleted secrets in a production Key Vault remain recoverable for 90 days and cannot be permanently purged early, even by an a…
Practice question from Azure Key Vault (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
hard · MCQ · Q-67025D
A company requires that deleted secrets in a production Key Vault remain recoverable for 90 days and cannot be permanently purged early, even by an administrator. Which configuration best satisfies this requirement?
- A.Enable soft delete with a 90-day retention period and enable purge protection on the Key Vault.Correct answer
- B.Disable soft delete and grant all administrators the Key Vault Administrator role.
- C.Enable diagnostic logging only; logs automatically restore deleted secrets.
- D.Create a new secret version every 90 days and disable deletion permissions.
Solution
Soft delete retains deleted secrets for the configured retention period and allows recovery. Purge protection prevents permanent deletion during that period, including by authorized administrators. Logging or secret versioning alone does not provide recoverability or purge protection.
More from Azure Key Vault
- An ASP.NET Core application runs in Azure App Service and must read a database password from Azure Key Vault without storing credentials in…
- An application stores a database connection string in an Azure Key Vault secret named DbConnection. The operations team rotates the value b…
- An Azure App Service uses a system-assigned managed identity to read secret values from an Azure Key Vault. The identity must not create, u…
- A .NET application must digitally sign data with an RSA key stored in Azure Key Vault. The private key must remain non-exportable and must…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed