Correct Answer: Key Vault References cache the secret value. Restart the App Service to force a refresh.
App Service loads Key Vault Reference values at startup and caches them. When a secret is rotated, the app continues using the cached value until it is restarted. Restarting the Ap...
Correct Answer
Key Vault References cache the secret value. Restart the App Service to force a refresh.
Why This Answer Is Correct
App Service loads Key Vault Reference values at startup and caches them. When a secret is rotated, the app continues using the cached value until it is restarted. Restarting the App Service (or using a deployment slot swap) forces it to re-read the new secret version from Key Vault.
This question evaluates your knowledge of Azure Key Vault — a core concept tested in Microsoft Certified: Azure Developer Associate (AZ-204). Understanding Azure Key Vault is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
A solutions architect needs to store application connection strings and API keys securely. Which service should they use?
What is the difference between a 'Secret' and a 'Key' in Azure Key Vault?
An administrator wants to manage access to a Key Vault using Azure RBAC (Role-Based Access Control) instead of legacy Access Policies. Is this possible?
What is the 'Soft Delete' feature in Azure Key Vault for?