A Key Vault secret was deleted ten minutes ago and the vault still exists. Soft-delete retention has not expired. What should the security engineer do first?
Select an answer to reveal the explanation.
Short Explanation
Ten minutes ago and the vault’s still standing? Soft-delete recover is the fast lane. Save the backup-blob restore for when the vault itself is gone or retention already burned down.
Full Explanation
When a vault still exists and soft-delete retention has not elapsed, recovering the soft-deleted secret, key, or certificate is the direct path. Backup restore is intended for vault loss, migration, or scenarios after purge or retention ends. Immediate purge and disabling soft-delete remove recovery options. Choosing recover versus restore is the associate-level judgment AZ-500 targets.