Q26 Key Vault Domain 4 · 20–25% of exam Priority · Real Exam

An application needs a connection string that changes when the database password rotates, with zero downtime. What design achieves this?

  1. A Hardcode the password
  2. B Store the connection string in Key Vault, rotate with dual credentials, and refresh the client cache on the rotation event (correct answer)
  3. C Restart the app hourly
  4. D Disable rotation

Shortcut: Two-set credential rotation keeps the old credential valid while the new one is published, and refreshing the cache on the rotation event avoids any window of failed authentication.