You need to back up all secrets, keys, and certificates from an Azure Key Vault. You want to automate this process and store the backups securely. You have an Azure Automation account. What should you do?

Create a PowerShell runbook that uses the Az.KeyVault backup commands and stores the files in a storage account with private endpoint.

Use the Azure portal to manually download each secret, key, and certificate.

Use Azure Backup to back up the Key Vault.

Create a Logic App that copies the Key Vault to another region.

Microsoft Certified:Azure Security Engineer Associate

Domain 4Objective 1

Implement and Manage Enforcement of Cloud Governance Policies AZ-500 Practice Questions (Page 3)

Part of the Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel domain, which accounts for 30–35% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

15concepts

30–35%of the exam

15 Concepts in This Objective

Azure Policy Creation
Azure Policy Assignment
Azure Policy Interpretation
Azure Policy Initiatives
Key Vault Network Configuration
Key Vault Access Policies
Azure RBAC for Key Vault
Manage Key Vault Certificates
Manage Key Vault Secrets
Manage Key Vault Keys
Key Rotation Configuration
Backup Key Vault Items
Recovery of Key Vault Items
Backup Security Controls
Asset Management Security Controls

Questions 11–15

11foundation · easy
You have an existing RSA key pair that you want to use with Azure Key Vault. Which operation should you use to bring it into the vault?
Select an answer first
12foundation · easy
You need to back up a certificate in Azure Key Vault. Which operation should you use?
Select an answer first
13foundation · easy
You are authoring a custom Azure Policy definition. Which effect should you use to prevent the creation of a resource that does not comply with the policy?
Select an answer first
14foundation · easy
You need to restrict access to an Azure Key Vault so that only resources in a specific virtual network can reach it. Which Key Vault network setting should you configure?
Select an answer first
15expert · hard
You need to back up all secrets, keys, and certificates from an Azure Key Vault. You want to automate this process and store the backups securely. You have an Azure Automation account. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.

Implement and Manage Enforcement of Cloud Governance Policies AZ-500 Practice Questions (Page 3)

Questions 11–15

You have an existing RSA key pair that you want to use with Azure Key Vault. Which operation should you use to bring it into the vault?

You need to back up a certificate in Azure Key Vault. Which operation should you use?

You are authoring a custom Azure Policy definition. Which effect should you use to prevent the creation of a resource that does not comply with the policy?

You need to restrict access to an Azure Key Vault so that only resources in a specific virtual network can reach it. Which Key Vault network setting should you configure?

You need to back up all secrets, keys, and certificates from an Azure Key Vault. You want to automate this process and store the backups securely. You have an Azure Automation account. What should you do?

Keep studying — Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel