You have an Azure subscription that contains a storage account named storage1. You need to ensure that the access keys for storage1 rotate…

Azure Key Vault allows you to manage and automatically rotate storage account access

keys. By configuring Key Vault to manage the storage account keys, you can set up a

rotation policy that automatically regenerates the keys at specified intervals, enhancing

security by reducing the lifetime of each key.

A. a backup vault: Backup vaults are used for Azure Backup services to store backup data,

not for managing or rotating storage account keys.

B. redundancy for storage1: Redundancy settings (LRS, GRS, etc.) for a storage account

ensure data durability and availability, not key rotation.

C. lifecycle management for storage1: Lifecycle management policies automate data tiering

or deletion for blobs within a storage account, not access key rotation.

E. a Recovery Services vault: Recovery Services vaults are used for Azure Backup and

Azure Site Recovery, not for managing storage account access keys.

Microsoft Learn. (2023). Manage storage account keys with Key Vault and Azure CLI.

Retrieved from https://learn.microsoft.com/en-us/azure/key-vault/secrets/overview-storagekeys#manage-storage-account-keys

Microsoft Learn. (2023). Automate the rotation of a secret for resources that have two sets

of authentication credentials. Retrieved from https://learn.microsoft.com/en-us/azure/keyvault/secrets/tutorial-rotation-dual?tabs=azure-cli (This tutorial demonstrates the principle

for services like storage accounts).

Microsoft Learn. (2023). What is Azure Key Vault?. Retrieved from

https://learn.microsoft.com/en-us/azure/key-vault/general/overview