Managing Certificates Secrets and Keys

What you'll be asked

1. Which Azure service is the primary recommended solution for securely storing and managing application secrets, keys, and certificates?
2. When configuring an Azure Policy to enforce governance, which built-in policy definition would you use to ensure that all Key Vaults have soft-delete enabled?
3. An organization wants to receive an alert in Microsoft Sentinel whenever a secret is accessed in a Key Vault. What is the standard process to achieve this?
4. To minimize the risk of compromised credentials, what is the best practice for managing secrets used by Azure Virtual Machines?
5. You are implementing a rotation policy for secrets. If you require that secrets be rotated automatically every 90 days, which feature of Azure Key Vault must be configured?

Answers and explanations come after you submit.