Exam AZ-303 topic 2 question 39 discussion

Correct Answer . Microsoft recommends that the access keys be regularly rotated. Rotating the keys helps to keep the storage accounts secure by invalidating old keys. To manually rotate the keys, the following process must be followed: Alter service connections to use the secondary key. Rotate the primary key in the Azure portal or on the command line. For example, to rotate key1 for the az303fsdemosa storage account in PowerShell, execute the following commands: Click here to view code image New-AzStorageAccountKey ' -ResourceGroupName $resourceGroupName ' -Name $storageAccountName ' -KeyName key1 Alter service connections to use the primary key again. Rotate the secondary key using the same method as shown in step2. The switch between primary and secondary in this process is why Microsoft recommends that only the primary or secondary keys are used by all services by default. Otherwise, connections to storage accounts will be lost when you rotate the keys.

Correct

B is correct

Correct

an Azure AD enterprise application - Azure AD must be configured to integrate with an application. You manage applications on the Enterprise applications. Azure Logic Apps - Though we can rotate the keys using Azure Logic apps implementation, we have simplified approach using Azure Key Vault. an Azure Desired State Configuration (DSC) extension - The primary use case for the Azure Desired State Configuration (DSC) extension is to bootstrap a VM to the Azure Automation State Configuration (DSC) service. Answer is B

Correct Reference : https://docs.microsoft.com/en-us/azure/key-vault/secrets/tutorial-rotation-dual?tabs=azure-cli