An Azure Key Vault contains customer-managed keys and a Storage account is configured to use those keys. Which two Azure Storage services support encryption using keys stored in the Key Vault?
Choose an answer
Tap an option to check your answer.
Correct answer: Azure Files, Blob storage.
Why this is the answer
Azure Blob storage and Azure Files both support encryption at rest using customer-managed keys stored in Azure Key Vault. This allows you to control the encryption keys used to protect your data. When you configure a storage account to use customer-managed keys, these services integrate directly with Key Vault to retrieve the keys for encryption and decryption operations. Table storage and Queue storage are part of Azure Storage but currently do not support customer-managed keys directly from Azure Key Vault for their encryption at rest. They rely on Microsoft-managed keys for encryption.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed