Microsoft Azure Security Engineer Associate AZ-500 Practice Question

Configuring a key rotation policy on AppKey with a lifetime action of Rotate instructs Azure Key Vault to create a new version of the key every 30 days. The key name and base URI remain unchanged, so applications that call the base identifier automatically begin using the newest version without modification. Setting only an expiration date makes the key unusable after 30 days but does not create a new version. Soft delete or purge protection protect against accidental deletion rather than perform rotation. While an Azure Automation runbook could call the rotate command on a schedule, it requires additional resources and ongoing maintenance, making it a less efficient solution for this requirement.