A database password is stored in Key Vault. A job writes a new secret version but does not change the database password or refresh the application. Why does rotation fail?

Choose the single best answer.

A.Key Vault secret values are used only for cryptographic sign operations.
B.Secret rotation must coordinate the external credential change and consumer refresh.
C.Switching to Managed HSM will store the password and update every database automatically.
D.Every new secret version automatically changes the password in every external system.

Show the answer and explanation

✓ Correct answer

Secret rotation must coordinate the external credential change and consumer refresh.

A secret version is a stored value, so a rotation workflow must also change the external password and update consumers in a safe sequence. It does not automatically change external systems. Secrets differ from cryptographic keys, and Managed HSM is not general password storage or universal database rotation. Source: AZ-305 Study Guide.pdf, PDF page(s) 17.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.