AZ-204 Certification Practice Question #161

Question

You manage an Azure Key Vault named kv1 of Standard SKU.

You plan to programmatically store in kv1 an asymmetric key pair and use the key pair for encryption and decryption.

You must develop an application named app1 that will access the key pair in kv1.

You need to configure an object to retrieve a key pair from kv1.

Which object should you use?

Accepted Answer

The question asks which object retrieves an asymmetric key pair for encryption/decryption from Azure Key Vault. `KeyClient` is the correct Azure SDK client for all key operations — creating RSA/EC keys, getting them, and using them for cryptographic operations. `SecretClient` manages secrets (passwords, connection strings), `CertificateClient` manages X.509 certificates, and `KeyVaultSettingsClient` manages MHSM account settings. Both the Suggested Answer and all community votes align on D with MS Learn documentation as authoritative reference.

More AZ-204 practice questions