Q4 Key Vault Domain 4 · 20–25% of exam

Which Key Vault object type stores application passwords, connection strings, and API keys?

  1. A Key
  2. B Certificate
  3. C Secret (correct answer)
  4. D Token

Shortcut: Secrets store arbitrary text values (passwords, connection strings, API keys). Keys store cryptographic keys (RSA, EC) for encryption/signing. 509 certs with auto-renewal.

Secrets store arbitrary text values (passwords, connection strings, API keys). Keys store cryptographic keys (RSA, EC) for encryption/signing. Certificates manage X.509 certs with auto-renewal.