nerdexam
Microsoft

AZ-104 · Question #610

You have an Azure subscription that contains a storage account named storage1. You plan to create a blob container named container1. You need to use customer-managed key encryption for container1…

The correct answer is E. an RSA key type with a key size of 2048, 3072, or 4096 only. Azure storage encryption supports RSA and RSA-HSM keys of sizes 2048, 3072 and 4096. https://learn.microsoft.com/en-us/azure/storage/common/customer-managed-keys- overview#enable-customer-managed-keys-for-a-storage-account

Submitted by saadiq_pk· Mar 4, 2026Implement and manage storage

Question

You have an Azure subscription that contains a storage account named storage1. You plan to create a blob container named container1. You need to use customer-managed key encryption for container1. Which key should you use?

Options

  • Aan EC key that uses the P-384 curve only
  • Ban EC key that uses the P-521 curve only
  • Can EC key that uses the P-384 curve or P-521 curve only
  • Dan RSA key with a key size of 4096 only
  • Ean RSA key type with a key size of 2048, 3072, or 4096 only

How the community answered

(28 responses)
  • B
    7% (2)
  • D
    4% (1)
  • E
    89% (25)

Explanation

Azure storage encryption supports RSA and RSA-HSM keys of sizes 2048, 3072 and 4096. https://learn.microsoft.com/en-us/azure/storage/common/customer-managed-keys- overview#enable-customer-managed-keys-for-a-storage-account

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice