Q23 Key Vault Domain 4 · 20–25% of exam

What is the purpose of Key Vault key rotation?

  1. A Deletes old secrets automatically
  2. B Creates a new key version (current version changes), with the old version retained for decryption of existing data (correct answer)
  3. C Regenerates the vault access key
  4. D Migrates keys to another region

Shortcut: Key rotation creates a new key version. The new version becomes active for new operations. Old versions remain available for decryption of data encrypted with them (retained in vault).