Correct Answer: Secrets are for simple strings like passwords; keys are for cryptographic operations
Secrets are used for small pieces of sensitive data (like connection strings), while keys are used for cryptographic encryption and signing....
Correct Answer
Secrets are for simple strings like passwords; keys are for cryptographic operations
Why This Answer Is Correct
Secrets are used for small pieces of sensitive data (like connection strings), while keys are used for cryptographic encryption and signing.
This question evaluates your knowledge of Azure Key Vault — a core concept tested in Microsoft Certified: Azure Fundamentals (AZ-900). Understanding Azure Key Vault is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
What is the primary purpose of Azure Key Vault?
Which Azure Key Vault feature allows you to recover deleted vaults or individual objects for a certain period after deletion?
Which feature of Key Vault ensures that a deleted object or vault cannot be permanently deleted (purged) until the retention period has passed?
You want to grant an Azure Virtual Machine access to a secret in a Key Vault without storing any credentials inside the VM's code. What should you use?