Exam AZ-500 topic 4 question 116 discussion

Actual exam question from Microsoft's AZ-500

Question #: 116
Topic #: 4

You have an Azure subscription that contains an Azure Key Vault Standard key vault named Vault1. Vault1 hosts a 2048-bit RSA key named key1.

You need to ensure that key1 is rotated every 90 days.

What should you do first?

A. Create a key rotation policy.
B. Modify the Access policies settings of Vault1.
C. Upgrade Vault1 to Key Vault Premium.
D. Recreate key1 as an EC key.

Show Suggested Answer

Suggested Answer: A 🗳️

by husam421 at Jan. 11, 2024, 3:17 p.m.

Comments

Submit Cancel

husam421

Highly Voted 1 year, 5 months ago

Selected Answer: A

Given answer is correct https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/key-rotation

upvoted 9 times

cerifyme85

9 months, 1 week ago

THis is for HSM But for azure default keyvault https://learn.microsoft.com/en-us/azure/key-vault/keys/how-to-configure-key-rotation

upvoted 2 times

...

dddddddddddww12

Most Recent 1 week, 1 day ago

Selected Answer: C

Creating a rotation policy (option A) isn’t possible on a Standard vault.

upvoted 1 times

...

Jimmy500

11 months, 2 weeks ago

A is correct!

upvoted 1 times

...

ITFranz

12 months ago

Answer is A. Automated key rotation in Managed HSM allows users to configure Managed HSM to automatically generate a new key version at a specified frequency. You can set a rotation policy to configure rotation for each individual key and optionally rotate keys on demand

upvoted 1 times

...