You are creating an Azure Key Vault by using PowerShell and must ensure that deleted objects are retained for 90 days. Which two parameters must you specify to meet this requirement? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: EnablePurgeProtection, EnableSoftDelete.
Why this is the answer
To ensure deleted objects in Azure Key Vault are retained for 90 days, you must enable both soft delete and purge protection. EnableSoftDelete allows the recovery of deleted key vaults and their objects (keys, secrets, certificates) within a retention period, preventing accidental or malicious deletion. EnablePurgeProtection prevents the permanent deletion of the key vault or its objects during the soft-delete retention period, even by privileged users, thus enforcing the 90-day retention. EnabledForDeployment and EnabledForTemplateDeployment are access policies that allow Azure Virtual Machines or Azure Resource Manager to retrieve secrets from the key vault, respectively, and do not relate to object retention.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed