Exam AZ-204 topic 4 question 63 discussion

A&D for sure! https://learn.microsoft.com/en-us/azure/key-vault/keys/how-to-configure-key-rotation

Key rotation policy and Event Grid notification

Key Vault is integrated Event Grid already, so there is no need to create an additional Event Grid instance.

B AND D

B&D are correct

B. Configure Azure Key Vault alerts. D. Create and configure a key rotation policy during key creation.

For me, B and D for sure.

B. Configure Azure Key Vault alerts. To receive notifications of expiring keys, you need to configure Azure Key Vault alerts. You can set up alerts for key expiration events, which will notify you before the key expires. D. Create and configure a key rotation policy during key creation. To automate key rotation, you need to create and configure a key rotation policy when creating the keys in Azure Key Vault. You can set the rotation interval to three months, as required, and also allow for manual key rotation.

We can use the Key Rotation Policy in Azure Key Vault combined with Event Grid to trigger sending notification when a secret in the key vault is about to expire. https://learn.microsoft.com/en-us/azure/key-vault/general/event-grid-tutorial

B & C are correct Alerts for notifications and Access policies for storage acess to existing keys

B & D To configure key rotation and enable key expiry notifications for Azure Key Vault, you should perform the following two actions: B. Configure Azure Key Vault alerts: Configure alerts for when a key is expiring, so that you can receive notifications before the key expiry. You can configure these alerts in Azure Key Vault using Azure Monitor, which sends an email or a webhook notification to a recipient or service when the key is about to expire. You can specify the notification threshold in terms of days, so you can receive alerts, for example, seven days before the key expiry. C. Create and assign an Azure Key Vault access policy: Create and assign an access policy for your Azure Key Vault that allows your microservices to perform key rotations manually, and automated key rotations using a key rotation script. You can create and assign access policies for Azure Key Vault through the Azure portal or the Azure CLI. These actions enable you to configure key rotation and notifications for key expiry.