You have an Azure subscription that contains an Azure Key Vault Standard key vault named Vault1. Vault1 hosts a 2048-bit RSA key named key1. You need to ensure that key1 is rotated every 90 days…

The correct answer is A. Create a key rotation policy. https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/key-rotation

Submitted by andres_qro· Mar 6, 2026Secure compute, storage, and databases

Question

You have an Azure subscription that contains an Azure Key Vault Standard key vault named Vault1. Vault1 hosts a 2048-bit RSA key named key1. You need to ensure that key1 is rotated every 90 days. What should you do first?

Options

ACreate a key rotation policy.
BModify the Access policies settings of Vault1.
CUpgrade Vault1 to Key Vault Premium.
DRecreate key1 as an EC key.

How the community answered

(43 responses)

A
86% (37)
B
7% (3)
C
5% (2)
D
2% (1)

Explanation

https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/key-rotation

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice