When creating an Azure Key Vault with PowerShell, deleted objects must be retained for 90 days. Which two parameters must you set together to enforce this retention? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: EnablePurgeProtection, EnableSoftDelete.
Why this is the answer
To ensure deleted objects in an Azure Key Vault are retained for 90 days, you must enable both soft delete and purge protection. EnableSoftDelete allows for the recovery of deleted key vaults and their objects for a default retention period of 90 days, preventing immediate, accidental deletion. EnablePurgeProtection prevents the immediate and permanent deletion (purging) of the key vault or its objects during the soft delete retention period, even by privileged users. Without EnablePurgeProtection, a user could still purge the soft-deleted items before the 90-day period expires. EnabledForDeployment and EnabledForTemplateDeployment are access policies that allow Azure Virtual Machines and Azure Resource Manager to retrieve secrets, respectively, and are unrelated to retention policies.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed