Microsoft Azure Administrator Associate AZ-104 Practice Question

Enabling customer-managed keys allows the organization to control the encryption of data at rest by managing their own keys in Azure Key Vault. This provides greater control over key rotation and revocation, meeting the security requirement. Soft delete for blobs helps recover deleted blobs but does not relate to encryption key management. Advanced threat protection offers security alerts for anomalous activities but doesn't control encryption keys. Secure transfer required enforces secure connections but doesn't provide control over encryption keys.