Q37 Key Vault Domain 4 · 20–25% of exam Priority · Real Exam

Which logging configuration records every secret read for audit purposes?

  1. A Enable AuditEvent diagnostic logs to Log Analytics (correct answer)
  2. B Enable Application Insights
  3. C Turn on soft delete
  4. D Enable purge protection

Shortcut: The AuditEvent category captures data-plane operations including who accessed which object and when. Routing it to Log Analytics makes it queryable with KQL and alertable.