You have an Azure subscription that contains an Azure key vault named Vault1 and a virtual machine named VM1. VM1 has the Key Vault VM extension installed. For Vault1, you rotate the keys, secrets…

The correct answer is C. the certificates only. The Key Vault VM extension provides automatic refresh of certificates stored in an Azure key vault. Specifically, the extension monitors a list of observed certificates stored in key vaults, and, upon detecting a change, retrieves, and installs the corresponding certificates…

Submitted by anna_se· Mar 6, 2026Secure compute, storage, and databases

Question

You have an Azure subscription that contains an Azure key vault named Vault1 and a virtual machine named VM1. VM1 has the Key Vault VM extension installed. For Vault1, you rotate the keys, secrets, and certificates. What will be updated automatically on VM1?

Options

Athe keys only
Bthe secrets only
Cthe certificates only
Dthe keys and secrets only
Ethe secrets and certificates only
Fthe keys, secrets, and certificates

How the community answered

(27 responses)

A
7% (2)
C
78% (21)
D
4% (1)
F
11% (3)

Explanation

The Key Vault VM extension provides automatic refresh of certificates stored in an Azure key vault. Specifically, the extension monitors a list of observed certificates stored in key vaults, and, upon detecting a change, retrieves, and installs the corresponding certificates. https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/key-vault- windows?tabs=version3

Topics

#Key Vault VM extension#certificate auto-renewal#secrets#key vault

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice