Before deleting or moving a Key Vault key used as a customer-managed key, what backup action should the security engineer take?
Select an answer to reveal the explanation.
Short Explanation
Before you yank a CMK, take a Key Vault backup of that object. You get an encrypted blob you can restore later—not a screenshot and not a plaintext CSV on the Internet.
Full Explanation
Key Vault supports per-object backup for keys, secrets, and certificates, producing an encrypted backup blob suitable for later restore into a Key Vault under documented constraints. Portal screenshots and plaintext exports are not valid cryptographic backups. Azure Backup for virtual machines protects VM workloads and is not the per-object Key Vault backup operation tested here.