Microsoft · SC-500
Azure Key Vault
SC-500 · Lesson 3 of 15 · 12:28
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-500 exam (Microsoft Certified: Cloud and AI Security Engineer Associate). In this lesson: keys, secrets, and certificates, soft delete and purge protection, Azure RBAC versus legacy access policies, the Key Vault firewall and private endpoints, and Defender for Key Vault and secret scanning in Defender CSPM. Includes three original practice questions.
Preview the topics
- Developers with the Contributor role keep granting themselves access to production secrets. Which change stops this?
- A vault must only be reachable from the company’s virtual network, with no public access at all. What should you configure?
- The security team wants alerts when someone accesses a vault in an unusual or suspicious way. What should it enable?