Hotspot Question You have an Azure subscription that contains an Azure key vault named Vault1. On January 1, 2019, Vault1 stores the following secrets. Which can each secret be used by an…

Question

Exhibits

Answer Area

• Password1 can be used by an applicationNo
• Password2 can be used by an applicationNo

Explanation

This question tests understanding of Azure Key Vault secret lifecycle management, specifically how 'Enabled' status, activation dates (Not Before), and expiration dates interact to determine secret usability.

Approach. To determine if a secret can be used, three conditions must ALL be true: (1) The secret must be 'Enabled', (2) The current date must be on or after the 'Activation Date' (Not Before date) if one is set, and (3) The current date must be before the 'Expiration Date' if one is set. For example, a secret that is Enabled with no activation or expiration date can always be used. A secret that is Enabled but has a future activation date cannot be used until that date arrives. A secret that is Enabled but past its expiration date can no longer be used. A disabled secret cannot be used regardless of dates. Evaluating each secret against all three criteria on the reference date of January 1, 2019 determines the correct answer for each row.

Concept tested. Azure Key Vault secret lifecycle management: understanding how the 'Enabled' flag, 'Not Before' (activation date), and 'Expiration Date' properties collectively control whether a secret is accessible to applications at any given point in time.

Reference. https://learn.microsoft.com/en-us/azure/key-vault/secrets/about-secrets

No community discussion yet for this question.