thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Azure Key Vault

Azure service for securely storing and controlling access to secrets, encryption keys and certificates.

Definition

Key Vault provides Standard (software-protected keys) and Premium (HSM-protected keys) tiers, with Azure Managed HSM for single-tenant FIPS 140 Level 3 needs. Access is controlled with Azure RBAC (recommended) or access policies; soft delete is enforced and purge protection prevents permanent deletion during retention. All access can be logged.

Example

A web app retrieves its database connection string from Key Vault using a managed identity.

Exam tip

Enable purge protection when customer-managed keys protect storage or databases, otherwise deleting the key could make data unrecoverable.

Related terms