Correct Answer: A Secret is a simple string (password, key string); a Key is a cryptographic object used for encryption/decryption operations
Secrets are for retrieving values; Keys are for performing mathematical cryptographic operations without seeing the key material....
Correct Answer
A Secret is a simple string (password, key string); a Key is a cryptographic object used for encryption/decryption operations
Why This Answer Is Correct
Secrets are for retrieving values; Keys are for performing mathematical cryptographic operations without seeing the key material.
This question evaluates your knowledge of Azure Key Vault — a core concept tested in Microsoft Certified: Azure Administrator Associate (AZ-104). Understanding Azure Key Vault is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
A solutions architect needs to store application connection strings and API keys securely. Which service should they use?
An administrator wants to manage access to a Key Vault using Azure RBAC (Role-Based Access Control) instead of legacy Access Policies. Is this possible?
What is the 'Soft Delete' feature in Azure Key Vault for?
Which Key Vault feature must be enabled to prevent secrets from being permanently deleted before the retention period expires, even by a Global Administrator?