nerdexam
MicrosoftMicrosoft

AZ-500 · Question #431

AZ-500 Question #431: Real Exam Question with Answer & Explanation

The correct answer is C: the certificates only. The Key Vault VM extension provides automatic refresh of certificates stored in an Azure key vault. Specifically, the extension monitors a list of observed certificates stored in key vaults, and, upon detecting a change, retrieves, and installs the corresponding certificates. htt

Submitted by anna_se· Mar 6, 2026

Question

You have an Azure subscription that contains an Azure key vault named Vault1 and a virtual machine named VM1. VM1 has the Key Vault VM extension installed. For Vault1, you rotate the keys, secrets, and certificates. What will be updated automatically on VM1?

Options

  • Athe keys only
  • Bthe secrets only
  • Cthe certificates only
  • Dthe keys and secrets only
  • Ethe secrets and certificates only
  • Fthe keys, secrets, and certificates

Explanation

The Key Vault VM extension provides automatic refresh of certificates stored in an Azure key vault. Specifically, the extension monitors a list of observed certificates stored in key vaults, and, upon detecting a change, retrieves, and installs the corresponding certificates. https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/key-vault- windows?tabs=version3

Community Discussion

No community discussion yet for this question.

Full AZ-500 PracticeBrowse All AZ-500 Questions