Your subscription contains storage1. You need to configure storage1 to automatically regenerate keys every 90 days. Which PowerShell cmdlet should you run?
Choose an answer
Tap an option to check your answer.
Correct answer: Add-AzKeyVaultflanagedStorageAccount.
Why this is the answer
The Add-AzKeyVaultManagedStorageAccount cmdlet is used to register an existing Azure Storage Account with Azure Key Vault, enabling Key Vault to manage the storage account's access keys, including automatic regeneration. By configuring this, you can set a key regeneration period, such as 90 days, ensuring regular key rotation for enhanced security. Set-AzStorageAccountManagementPolicy is incorrect because it configures lifecycle management policies for blobs, not key rotation. Set-AzStorageAccount is incorrect as it modifies general properties of a storage account, but not specifically key management through Key Vault. Add-AzStorageAccountManagementPolicyAction is also incorrect as it adds actions to a lifecycle management policy, unrelated to key regeneration.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed