Q12 Key Vault Domain 4 · 20–25% of exam

Which Key Vault feature automatically notifies systems or triggers actions when a key or certificate is about to expire?

  1. A Event Grid integration for near-expiry events (correct answer)
  2. B Webhook on secret creation only
  3. C Azure Monitor alerts on access policy changes
  4. D Scheduled purge tasks

Shortcut: Key Vault integrates with Event Grid to publish near-expiry (CertificateNearExpiry, KeyNearExpiry), expired, and other lifecycle events, enabling automated renewal workflows.