Do not treat this objective as a recognition exercise. Practise explaining and applying 'Manage encrypted secrets and variables: Define and scope encrypted secrets and variables at the organization, repository, and environment levels' in a new scenario, then check your reasoning against the official source. Source context: Read in English Manage keys and secrets in Azure Key Vault Module 5 Units Feedback Intermediate Security Engineer Azure Key Vault Azure Manage the security lifecycle of cryptographic keys and secrets in Azure Key Vault. Configure HSM-backed keys, implement Bring Your Own Key (BYOK) for regulatory scenarios, set up automated key rotation, and build zero-downtime secret rotation using dual-credential patterns. Learning objectives After completing this module, you'll be able to: Create and manage cryptographic keys, including HSM-protected and BYOK scenarios Configure automated key rotation policies to minimize cryptographic exposure risk Build zero-downtime secret rotation using dual-credential and automated rotation patterns Add Prerequisites Azure Key Vault deployed and secured with access controls configured Understanding of Azure RBAC and managed identities Familiarity with cryptographic concepts including keys and secrets Get started with Azure Choose the Azure account that's right for you.
Objective
Manage encrypted secrets and variables: Define and scope encrypted secrets and variables at the organization, repository, and environment levels