To use your own encryption keys for encrypting data at rest in an Azure Storage account, you need to configure customer-managed keys stored in Azure Key Vault. This approach lets you control and manage the encryption keys, enhancing security compliance. Microsoft-managed keys are managed by Azure and do not allow the use of your own keys. Client-side encryption involves encryption performed by the client application and is not configured at the storage account level. Azure Active Directory does not store encryption keys for storage account encryption.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are customer-managed keys in Azure Key Vault?
Open an interactive chat with Bash
How does server-side encryption with customer-managed keys work?
Open an interactive chat with Bash
Why is Azure Key Vault recommended for storing encryption keys?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Implement and manage storage
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .