Practice Test 1 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
You have to create a Standard Azure Key Vault as part of your company’s subscription. You are asked to ensure that protection against the immediate deletion of any object from the KeyVault for a period of 7 days.
You need to complete the below PowerShell cmdlet for this purpose.
Which of the following would go into Slot1?
A. -EnabledForDeployment
B. -EnablePurgeProtection
C. -SKU
D. -EnableSoftDelete
In this question, we are asked to ensure protection against the deletion of any object of the Key Vault, for a period of 7 days, after key vault object has been deleted.
Correct Answer- B EnableSurgeProtection
The answer B is the correct because EnablePurgeProtection option enforces a mandatory retention period for any key vault object which is in soft delete state. Purge protection duration may vary from 7 to 90 days. In this case, purge protection is for 7 days. See the following explanation and diagram for better understanding soft delete and purge options.
Key Vault’s soft-delete feature allows recovery of the deleted vaults and deleted key vault objects (for example, keys, secrets, certificates), The soft delete and purge protection feature offer the following protections:
- Once a secret, key, certificate, or key vault is deleted, it will remain recoverable for a configurable period of 7 to 90 calendar days. If, no configuration, is specified, the default recovery period will be set to 90 days. This provides users with sufficient time to notice an accidental secret deletion and respond.
- Two operations must be made to permanently delete a secret. First, a user must delete the object, which puts it into the soft-deleted state. Second, a user must purge the object in the soft-deleted state. The purge operation requires additional access policy permissions. These additional protections reduce the risk of a user accidentally or maliciously deleting a secret or a key vault.
The answer A is incorrect because -EnabledForDeployment
Enables the Microsoft. Compute resource provider to retrieve secrets from this key vault when this key vault is referenced in resource creation, for example, while creating a virtual machine.
Answer C is in incorrect because -SKU
specifies the SKU of the key vault instance. For information about which features are available for each SKU
Answer D is incorrect because -EnableSoftDelete
This is valid for deprecated cmdLet New-AzureRMKeyVault
it is not valid for New-AzKeyVault
For more details, please refer to following link
https://docs.microsoft.com/en-us/powershell/module/az.keyvault/new-azkeyvault?view=azps-5.4.0
Comments are closed, but trackbacks and pingbacks are open.