Q41 Key Vault Domain 4 · 20–25% of exam

A secret in Key Vault has multiple versions. Which version does an application retrieve when accessing the secret by name without specifying a version?

  1. A The oldest version
  2. B The first version
  3. C The latest enabled version (correct answer)
  4. D A random version

Shortcut: Accessing a secret by name without a version always returns the latest enabled version. Disabled versions are skipped. This enables secret rotation without application configuration changes.