A key rotation policy creates a new key version, but some encrypted data still needs an older version. What should be recommended?

Choose the single best answer.

A.Assume a new version re-encrypts all external data without consumer involvement.
B.Immediately disable every old version after the new version is created.
C.Verify consumer adoption and retain required old versions until decryption and recovery needs permit retirement.
D.Export the private key into a plaintext resource tag for recovery.

Show the answer and explanation

✓ Correct answer

Verify consumer adoption and retain required old versions until decryption and recovery needs permit retirement.

Rotation must coordinate consumer version adoption and preservation of keys required by existing data or recovery. Creating a version does not automatically re-encrypt every external dataset. Immediate disablement can make data unavailable, and plaintext tags are unsuitable for private key material. Source: AZ-305 Study Guide.pdf, PDF page(s) 17.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.