Q33 Key Vault Domain 4 · 20–25% of exam Priority · Real Exam

What happens to a Key Vault reference in App Service when the referenced secret is disabled?

  1. A The previous value continues to work indefinitely
  2. B Resolution fails and the setting becomes unresolved, typically breaking the dependent feature (correct answer)
  3. C The app is deleted
  4. D The secret is re-enabled automatically

Shortcut: Disabling a secret makes it unreadable. The reference cannot resolve on the next refresh, so the app setting is empty and dependent functionality fails.