A customer uses Azure AI Search. The customer plans to enable a server-side encryption and use customer-managed keys (CMK) stored in Azure. What are three implications of the planned change? Each…

Question

Options

• AThe index size will increase.
• BQuery times will increase.
• CA self-signed X.509 certificate is required.
• DThe index size will decrease.
• EQuery times will decrease.
• FAzure Key Vault is required.

• A
  68% (15)
• C
  5% (1)
• D
  9% (2)
• E
  18% (4)

Explanation

Customer-managed keys require an additional billable service, Azure Key Vault, which can be in a different region, but under the same subscription, as Azure AI Search. Enabling CMK encryption will increase index size and degrade query performance. Based on observations to date, you can expect to see an increase of 30%-60% in query times, although actual performance will vary depending on the index definition and types of queries. Because of this performance impact, we recommend that you only enable this feature on indexes that really require it. https://docs.microsoft.com/en-us/azure/search/search-security-overview#data-protection https://docs.microsoft.com/en-us/azure/search/search-security-overview#customer-managed-key

No community discussion yet for this question.