Microsoft Azure Security Engineer Associate AZ-500 Practice Question
Your company stores an RSA key named AppKey in an Azure Key Vault that uses Azure RBAC. Compliance requires the key to renew automatically every 90 days while keeping the same key URI, and for the previous version to remain usable for 30 days. In the Azure portal, which configuration should you apply to satisfy the requirement?
Import a new RSA key with the name AppKey, selecting the option to overwrite the existing key.
Enable purge protection for AppKey so that a new version is generated automatically after 90 days.
Create a rotation policy for AppKey that sets a 90-day rotation interval and appropriate lifetime actions.
Create a secret version of AppKey and set its content type to application/x-pkcs12.
A key rotation policy allows Key Vault to create a new version of the key on the schedule you define. When you set a rotation period of 90 days and specify an overlap period (for example, by leaving the key's expiry to 120 days), Key Vault automatically generates a new version every 90 days while the previous version remains available until it expires. Purge protection and soft-delete protect against permanent deletion but do not create new key versions. Importing or creating a new key with the same name changes the URI version only once and does not automate future rotations. Secrets and content types do not affect Key Vault keys.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Azure Key Vault?
Open an interactive chat with Bash
What is a key rotation policy?
Open an interactive chat with Bash
What is purge protection in Key Vault and how is it different from key rotation?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .