You are developing an application to transfer data between on-premises file servers and Azure Blob storage. The application stores keys, secrets, and certificates in Azure Key Vault and makes use of…

Question

Options

• ARun the Add-AzKeyVaultKey cmdlet.
• BRun the az keyvault update --enable-soft-delete true --enable-purge-
• CImplement virtual network service endpoints for Azure Key Vault.
• DRun the az keyvault update --enable-soft-delete false CLI.

• A
  10% (4)
• B
  69% (27)
• C
  18% (7)
• D
  3% (1)

Explanation

When soft-delete is enabled, resources marked as deleted resources are retained for a specified period (90 days by default). The service further provides a mechanism for recovering the deleted object, essentially undoing the deletion. Purge protection is an optional Key Vault behavior and is not enabled by default. Purge protection can only be enabled once soft-delete is enabled. When purge protection is on, a vault or an object in the deleted state cannot be purged until the retention period has passed. Soft-deleted vaults and objects can still be recovered, ensuring that the retention policy will be followed. The default retention period is 90 days, but it is possible to set the retention policy interval to a value from 7 to 90 days through the Azure portal. Once the retention policy interval is set and saved it cannot be changed for that vault. https://docs.microsoft.com/en-us/azure/key-vault/general/overview-soft-delete

No community discussion yet for this question.