How does Key Vault protect against accidental permanent deletion of critical secrets?
- A Backup policy
- B Soft delete (recoverable within retention period) + purge protection (prevents permanent delete during retention) (correct answer)
- C Geo-redundant replication
- D Vault lock
Shortcut: Soft delete moves deleted objects to a 'deleted' state recoverable within 7–90 days. Purge protection (when enabled) prevents anyone from permanently deleting objects during the retention period.