Q29 Key Vault Domain 4 · 20–25% of exam

A Key Vault secret is accidentally deleted. Which Key Vault feature allows recovery within 90 days?

  1. A Backup and restore
  2. B Geo-replication
  3. C Soft delete + Purge protection (correct answer)
  4. D Access policy rollback

Shortcut: Soft delete retains deleted objects for 7–90 days (configurable), allowing recovery. Purge protection prevents permanent deletion during the retention period, even by admins.