You created storage1 and plan to store data in Azure Files, Blob storage, Table storage, and Queue storage. For which two services can you configure encryption using keys stored in an Azure Key Vault?
Choose an answer
Tap an option to check your answer.
Correct answer: Blob storage, Azure Files.
Why this is the answer
Blob storage and Azure Files both support customer-managed keys (CMK) for encryption at rest, allowing you to store encryption keys in Azure Key Vault. This provides greater control over your encryption keys. Table storage and Queue storage, while encrypted by default using Microsoft-managed keys, do not currently offer the option to use customer-managed keys from Azure Key Vault for their encryption. Therefore, only Blob storage and Azure Files can be configured with encryption keys stored in Azure Key Vault.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed