You are designing an application to transport data between on-premises file servers and Azure Blob storage. The program makes use of the Azure Key Vault APIs and saves keys, secrets, and certificates there.
You want to configure the program to allow recovery of an inadvertent deletion of the key vault or key vault objects for 90 days following deletion.
What ought you to do?
-
A
Run the az keyvault update --enable-soft-delete true --enable-purge-protection true CLI.
-
B
Implement virtual network service endpoints for Azure Key Vault.
-
C
Run the az keyvault update --enable-soft-delete false CLI.
-
D
Run the Add-AzKeyVaultKey cmdlet.