What does the Key Vault enable-purge-protection setting prevent?
- A Secret versioning
- B Permanent deletion of the vault or its objects during the soft-delete retention period, by anyone including admins (correct answer)
- C Network access from the internet
- D Vault replication
Shortcut: Purge protection prevents soft-deleted objects (and the vault itself) from being permanently purged before the retention period expires. This is mandatory for regulatory compliance scenarios.