You need to protect the backup blobs of Key Vault items from unauthorized access. Which security control should you implement?

Store the backup blobs in an Azure Storage account with encryption and restricted access

Use Key Vault access policies to restrict backup operations

Use a private endpoint for the Key Vault

Enable soft delete on the Key Vault

A security admin needs to back up a Key Vault secret to protect against accidental deletion. They plan to restore it later if needed. What should they do?

Enable soft-delete and purge protection on the Key Vault.

Use the Azure CLI command 'az keyvault secret backup' to download a backup file.

Copy the secret to another Key Vault using the portal.

Export the secret as a plaintext file and store it in a storage account.

Microsoft Certified:Azure Security Engineer Associate

Domain 4Objective 1

Implement and Manage Enforcement of Cloud Governance Policies AZ-500 Practice Questions (Page 1)

Part of the Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel domain, which accounts for 30–35% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

15concepts

30–35%of the exam

15 Concepts in This Objective

Azure Policy Creation
Azure Policy Assignment
Azure Policy Interpretation
Azure Policy Initiatives
Key Vault Network Configuration
Key Vault Access Policies
Azure RBAC for Key Vault
Manage Key Vault Certificates
Manage Key Vault Secrets
Manage Key Vault Keys
Key Rotation Configuration
Backup Key Vault Items
Recovery of Key Vault Items
Backup Security Controls
Asset Management Security Controls

Questions 1–5

1foundation · easy
You need to protect the backup blobs of Key Vault items from unauthorized access. Which security control should you implement?
Select an answer first
2foundation · easy
You need to assign an Azure Policy to enforce a governance rule for all resources in a specific resource group. Which scope should you specify in the assignment?
Select an answer first
3foundation · easy
You need to configure automatic rotation for a key in Azure Key Vault. What should you define?
Select an answer first
4foundation · easy
You need to create a new RSA key in Azure Key Vault for use in encryption. Which operation should you perform?
Select an answer first
5application · medium
A security admin needs to back up a Key Vault secret to protect against accidental deletion. They plan to restore it later if needed. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.

Implement and Manage Enforcement of Cloud Governance Policies AZ-500 Practice Questions (Page 1)

Questions 1–5

You need to protect the backup blobs of Key Vault items from unauthorized access. Which security control should you implement?

You need to assign an Azure Policy to enforce a governance rule for all resources in a specific resource group. Which scope should you specify in the assignment?

You need to configure automatic rotation for a key in Azure Key Vault. What should you define?

You need to create a new RSA key in Azure Key Vault for use in encryption. Which operation should you perform?

A security admin needs to back up a Key Vault secret to protect against accidental deletion. They plan to restore it later if needed. What should they do?

Keep studying — Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel