Microsoft
AZ-104 · Question #610
You have an Azure subscription that contains a storage account named storage1. You plan to create a blob container named container1. You need to use customer-managed key encryption for container1…
The correct answer is E. an RSA key type with a key size of 2048, 3072, or 4096 only. Azure storage encryption supports RSA and RSA-HSM keys of sizes 2048, 3072 and 4096. https://learn.microsoft.com/en-us/azure/storage/common/customer-managed-keys- overview#enable-customer-managed-keys-for-a-storage-account
Submitted by saadiq_pk· Mar 4, 2026Implement and manage storage
Question
You have an Azure subscription that contains a storage account named storage1. You plan to create a blob container named container1. You need to use customer-managed key encryption for container1. Which key should you use?
Options
- Aan EC key that uses the P-384 curve only
- Ban EC key that uses the P-521 curve only
- Can EC key that uses the P-384 curve or P-521 curve only
- Dan RSA key with a key size of 4096 only
- Ean RSA key type with a key size of 2048, 3072, or 4096 only
How the community answered
(28 responses)- B7% (2)
- D4% (1)
- E89% (25)
Explanation
Azure storage encryption supports RSA and RSA-HSM keys of sizes 2048, 3072 and 4096. https://learn.microsoft.com/en-us/azure/storage/common/customer-managed-keys- overview#enable-customer-managed-keys-for-a-storage-account
Community Discussion
No community discussion yet for this question.