ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-300 All Questions

View all questions & answers for the SC-300 exam
Go to Exam

Exam SC-300 topic 2 question 41 discussion

Actual exam question from Microsoft's SC-300
Question #: 41
Topic #: 2
[All SC-300 Questions]

HOTSPOT
-

You have an Azure subscription that contains the key vaults shown in the following table.



The subscription contains the users shown in the following table.



On June 1, Admin4 performs the following actions:

• Deletes a certificate named Certificate1 from KeyVault1
• Deletes a secret named Secret1 from KeyVault2

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by Markus at Jan. 18, 2023, 9:15 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
wsrudmen
Highly Voted 1 year, 5 months ago
Yes - Key Vault Administrator can perform all data plane operations on a key vault. and purge protection is disabled for KeyVault2. NB: Purge protection is an optional Key Vault behavior and is not enabled by default. Do not mismatch with soft-delete No - We are still in the Purge protection remaining period. NB: Also the Key Vault contributor role doesn't allow to get access to certificate No - We are still in the Purge protection remaining period. Even if the Certificate Officer role allow to get access to certificate
upvoted 21 times
Holii
1 year, 1 month ago
Correct, even though the Purge Protection doesn't have a specified retention period, the minimum time you can specify is 7 days, which is more than the dates specified. https://learn.microsoft.com/en-us/azure/key-vault/general/soft-delete-overview#purge-protection
upvoted 1 times
Holii
1 year, 1 month ago
Forgive me, I am blind. There are dates quite literally listed in the question. Still the same.
upvoted 3 times
...
...
...
Markus
Highly Voted 1 year, 5 months ago
Correct. When purge protection is on, a vault or an object in the deleted state cannot be purged until the retention period has passed.
upvoted 6 times
...
EmnCours
Most Recent 11 months, 3 weeks ago
Yes - Key Vault Administrator can perform all data plane operations on a key vault. and purge protection is disabled for KeyVault2. NB: Purge protection is an optional Key Vault behavior and is not enabled by default. Do not mismatch with soft-delete No - We are still in the Purge protection remaining period. NB: Also the Key Vault contributor role doesn't allow to get access to certificate No - We are still in the Purge protection remaining period. Even if the Certificate Officer role allow to get access to certificate
upvoted 3 times
...
EmnCours
11 months, 3 weeks ago
Is correct Y N N Generally, only the subscription owner will be able to purge a key vault.
upvoted 3 times
...
dule27
1 year ago
YES NO NO
upvoted 1 times
...
OK2020
1 year, 1 month ago
https://learn.microsoft.com/en-us/azure/key-vault/general/soft-delete-overview
upvoted 2 times
...
OK2020
1 year, 1 month ago
https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guide?tabs=azure-cli
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel