Microsoft Azure Administrator Associate AZ-104 Practice Question
You are an Azure administrator for Contoso Ltd. The company requires that they manage the encryption keys used for data at rest in their Azure storage account named 'contosodata'. They have a key vault named 'contosokeyvault' with their keys. You need to configure 'contosodata' to meet the company's requirements.
What should you do?
Enable Infrastructure Encryption on 'contosodata' and specify 'contosokeyvault' as the key provider.
Configure 'contosodata' to use a key from 'contosokeyvault' for encryption.
Implement client-side encryption using keys from 'contosokeyvault'.
Disable default encryption on 'contosodata' and re-enable it using keys from 'contosokeyvault'.
To allow Contoso Ltd to manage the encryption keys for 'contosodata', you should configure the storage account to use a key from 'contosokeyvault' for encryption. This sets up customer-managed keys (CMK) using Azure Key Vault, giving the company full control over the keys used for encryption at rest. Enabling Infrastructure Encryption provides additional encryption but still uses Microsoft-managed keys. Client-side encryption is managed by the client application and does not change the encryption settings of the storage account. Default encryption on Azure storage accounts cannot be disabled.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are customer-managed keys (CMK) in Azure?
Open an interactive chat with Bash
How does Azure Key Vault integrate with Azure Storage for encryption?
Open an interactive chat with Bash
Why is client-side encryption not suitable in this scenario?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Implement and manage storage
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .