AI-102 Question 75
Select 2You are managing an Azure Storage Account that is used by several applications. To enhance security, you need to rotate the account keys without causing downtime to the applications. What steps should you take to accomplish this?
- A
Regenerate the secondary key and update the applications to use the new secondary key.
- B
Regenerate the primary key and update the applications to use the new primary key.
- C
Update the applications to use the secondary key, then regenerate the primary key.
- D
Disable the primary key to force applications to switch to the secondary key.
- E
Regenerate both the primary and secondary keys simultaneously.
Show answer and explanation
Correct answers: A, C
Explanation
To rotate Azure Storage Account keys without causing downtime, you should follow a phased approach. First, regenerate the secondary key and update the applications to use it. Once all applications are using the secondary key, you can safely regenerate the primary key. This ensures that at least one valid key is always available for the applications.
- A. Correct.
This is correct. By regenerating the secondary key first and updating the applications to use it, you ensure there’s no downtime while preparing to rotate the primary key.
- B. Incorrect.
This is incorrect because directly regenerating the primary key without a transition plan would cause downtime for applications relying on it.
- C. Correct.
This is correct. Updating the applications to use the secondary key before regenerating the primary key ensures continuity of service during the rotation process.
- D. Incorrect.
This is incorrect because disabling the primary key without proper planning can cause immediate disruptions for applications using it.
- E. Incorrect.
This is incorrect because regenerating both keys simultaneously would invalidate all access keys, leading to application downtime.