Exam AZ-204 topic 1 question 15 discussion

Correct Answer

https://learn.microsoft.com/en-us/azure/key-vault/general/soft-delete-overview

The --enable-soft-delete flag enables soft-delete on the key vault, which means that when objects are deleted, they are retained in a recoverable state for a specified period (90 days, in this case), rather than being immediately deleted. The --enable-purge-protection flag turns on purge protection, which prevents the permanent deletion of objects until the soft-delete retention period has expired. This ensures that deleted objects can be recovered within the retention period.

Soft-delete means that deleted key vault objects can be recovered for 90 days after deletion. Purge protection means that deleted key vault objects cannot be permanently deleted until the purge protection period has expired.

To configure an Azure Key Vault to allow recovery of deleted vaults or objects, you need to enable soft delete and purge protection. Soft delete is a feature that allows you to recover a deleted Key Vault or its objects from the backup for a period of time, without the need to restore from a backup. By default, soft delete is disabled in Azure Key Vault. Purge protection is a feature that protects Key Vault or its objects from being purged permanently, even if soft delete is enabled. This feature allows for recovery of the deleted object beyond the soft delete retention period. Purge protection is also disabled by default. To enable soft delete and purge protection, you can use the Azure CLI command "az keyvault update" with the following options: --enable-soft-delete true: This option enables soft delete for the Key Vault. --enable-purge-protection true: This option enables purge protection for the Key Vault.

B is correct. Soft-delete and purge protection are both needed, and B shows the correct syntax to achieve this

B. Purge defines how long a key vault entry is 'alive' before it can be deleted. Soft delete allows you to recover mistakenly deleted key vault entries.

B. Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI. To configure the application to allow recovery of an accidental deletion of the key vault or key vault objects for 90 days after deletion, you should run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI command. This command enables both soft delete and purge protection for the key vault. Soft delete allows deleted key vaults and their contents to be retained and recoverable for the specified number of days after deletion. Purge protection prevents key vault from being permanently deleted before the soft-delete retention period has elapsed.

Correct option is Answer: B

Correct answer

correct

correct

correct

correct

Correct

Correct