For storage account storage1 you create an encryption scope named Scope1. Which storage type(s) can you encrypt using an encryption scope?
Choose an answer
Tap an option to check your answer.
Correct answer: containers only.
Why this is the answer
Encryption scopes in Azure Storage allow you to manage encryption keys at a more granular level than the storage account. Currently, encryption scopes can only be applied to Blob storage containers. This means you can use different customer-managed keys (CMK) or Microsoft-managed keys (MMK) for different containers within the same storage account. While Azure Storage encrypts all data at rest by default, encryption scopes provide enhanced control for specific data sets. Therefore, only containers can be encrypted using an encryption scope. File shares, tables, and queues do not support encryption scopes.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed