Correct Answer: Access Policies or Azure RBAC
You can use either the legacy vault access policies or the modern Azure role-based access control (RBAC) model....
Correct Answer
Access Policies or Azure RBAC
Why This Answer Is Correct
You can use either the legacy vault access policies or the modern Azure role-based access control (RBAC) model.
This question evaluates your knowledge of Azure Key Vault — a core concept tested in Microsoft Certified: Azure Fundamentals (AZ-900). Understanding Azure Key Vault is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
What is the primary purpose of Azure Key Vault?
In Azure Key Vault, what is the difference between a 'secret' and a 'key'?
Which Azure Key Vault feature allows you to recover deleted vaults or individual objects for a certain period after deletion?
Which feature of Key Vault ensures that a deleted object or vault cannot be permanently deleted (purged) until the retention period has passed?