What is the behavior when an application tries to access a Key Vault secret that has been disabled?
- A The previous version is returned
- B Key Vault returns the disabled secret with a warning
- C Key Vault returns 403 Forbidden (secret is disabled) (correct answer)
- D An email notification is sent
Shortcut: Disabled secrets return HTTP 403 (Forbidden) — the secret exists but is not accessible. This is distinct from 404 (not found). Use disabling to prevent access without permanently deleting the secret.