nerdexam
Microsoft

AZ-500 · Question #593

You have an Azure key vault named Vault1 that stores the resources shown in the following table. Which resources support the creation of a rotation policy?

The correct answer is D. Key1 and Cert1 only. Configure cryptographic key auto-rotation in Azure Key Vault Automated cryptographic key rotation in Key Vault allows users to configure Key Vault to automatically generate a new key version at a specified frequency. To configure rotation you can use key rotation policy, which…

Submitted by yuriko_h· Mar 6, 2026Secure compute, storage, and databases

Question

You have an Azure key vault named Vault1 that stores the resources shown in the following table. Which resources support the creation of a rotation policy?

Options

  • AKey1 only
  • BCert1 only
  • CKey1 and Secret1 only
  • DKey1 and Cert1 only
  • ESecret1 and Cert1 only
  • FKey1, Secret1, and Cert1

How the community answered

(19 responses)
  • B
    5% (1)
  • D
    89% (17)
  • E
    5% (1)

Explanation

Configure cryptographic key auto-rotation in Azure Key Vault Automated cryptographic key rotation in Key Vault allows users to configure Key Vault to automatically generate a new key version at a specified frequency. To configure rotation you can use key rotation policy, which can be defined on each individual key. * Certificate1 - Yes Configure certificate auto-rotation in Key Vault You can easily provision, manage, and deploy digital certificates by using Azure Key Vault. The certificates can be public and private Secure Sockets Layer (SSL)/Transport Layer Security (TLS) certificates signed by a certificate authority (CA), or a self-signed certificate. Key Vault can also request and renew certificates through partnerships with CAs, providing a robust solution for certificate lifecycle management. https://learn.microsoft.com/en-us/azure/key-vault/keys/how-to-configure-key-rotation https://learn.microsoft.com/en-us/azure/key-vault/certificates/tutorial-rotate-certificates

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice