Which permission string should be added at line CS07 of ConfigureSSE.ps1 to meet the security policy?
Choose an answer
Tap an option to check your answer.
Correct answer: ■€"PermissionsToKeys wrapkey, unwrapkey, get.
Why this is the answer
The correct permission string is "PermissionsToKeys wrapkey, unwrapkey, get" because the scenario involves protecting a storage account's encryption key using Azure Key Vault. The wrapkey and unwrapkey permissions are essential for Key Vault to encrypt (wrap) and decrypt (unwrap) the storage account's encryption key. The get permission allows retrieval of the key's public properties and tags. Incorrect options: "PermissionsToKeys create, encrypt, decrypt" is incorrect because create is for generating new keys, and encrypt/decrypt are for direct data encryption/decryption using the key, not for managing another service's key. "PermissionsToCertificates create, encrypt, decrypt" and "PermissionsToCertificates wrapkey, unwrapkey, get" are incorrect because the operation concerns protecting a storage account's encryption key, not a certificate.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed