Q45 Key Vault Domain 4 · 20–25% of exam Priority · Real Exam

What does enabling purge protection prevent?

  1. A Reading secrets
  2. B Permanently purging a soft-deleted vault or object before the retention period expires (correct answer)
  3. C Creating new secrets
  4. D Rotating keys

Shortcut: Purge protection makes soft-deleted objects irreversibly retained until the window elapses, defeating an attacker who deletes then purges to destroy evidence or data.