Key Vault Certificates and Secrets Quiz

What you'll be asked

1. Which Azure Key Vault feature allows you to manage the lifecycle of SSL/TLS certificates by automatically renewing them through integrated Certificate Authorities?
2. You need to ensure that an Azure Function can access a secret stored in Azure Key Vault without storing credentials in the application code. What is the recommended approach?
3. An application requires access to a Key Vault secret. You want to follow the principle of least privilege. Which authorization model should you use to restrict access to specific secrets only?
4. You have enabled soft-delete on your Key Vault. After deleting a secret, you realize you need to restore it. What is the maximum retention period for a soft-deleted secret before it is permanently purged?
5. You are configuring a Key Vault to be accessed by a Virtual Machine. You want to ensure that the traffic between the VM and the Key Vault never traverses the public internet. Which feature should you implement?

Answers and explanations come after you submit.