A kelp-forest diver deletes OldSmtp in Key Vault and can still recover it during the retention window. What developer-facing behavior explains that?
Select an answer to reveal the explanation.
Short Explanation
Delete on a soft-delete vault is more like “move to recycle bin” than shredder. Until retention ends—and longer if purge protection blocks purge—you can still recover OldSmtp.
Full Explanation
Key Vault soft-delete retains deleted secrets, keys, and certificates for a recoverable period; purge protection further restricts permanent purge. Developers and operators should treat delete as recoverable under those policies, not as an immediate irreversible wipe. Soft-delete is a Key Vault capability, not an App Configuration feature-flag behavior, and is not limited to Managed HSM.