Configuring Key Vault Access Policies and RBAC

What you'll be asked

1. When configuring access to an Azure Key Vault, which of the following is the recommended method for granting granular permissions to users and applications?
2. A security auditor requires that all Key Vaults in your subscription must have 'Soft Delete' enabled. Which Azure service should you use to enforce this requirement automatically?
3. You are troubleshooting an application that cannot retrieve a secret from a Key Vault despite being assigned the 'Key Vault Secrets User' role. What is the most likely cause?
4. If you need to grant an application permission to sign data using a key stored in Key Vault without allowing it to export the private key, which role should you assign?
5. You have a hybrid environment where an on-premises server needs to access secrets in an Azure Key Vault. What is the most secure method to authenticate without using hardcoded credentials?

Answers and explanations come after you submit.