A team deploys new Key Vaults using API version 2026-02-01 and must supply application data access consistently. Which assumption matches the documented default?

Choose the single best answer.

A.Selecting RBAC as the default automatically gives every enabled managed identity secret-read access.
B.New vaults under that API version always default to legacy access policies.
C.Using that API version automatically converts every previously created vault to RBAC.
D.New vaults default to RBAC; assign suitable vault data roles explicitly.

Show the answer and explanation

✓ Correct answer

New vaults default to RBAC; assign suitable vault data roles explicitly.

From API version 2026-02-01, newly created vaults default to Azure RBAC. This does not automatically convert every existing vault or grant all managed identities data access. Explicit suitable role assignments and deployment-model checks remain necessary. Source: AZ-305 Study Guide.pdf, PDF page(s) 17.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.