nerdexam
Microsoft

AZ-204 · Question #196

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might h

The correct answer is A. Yes. Creating an Azure Key Vault secret to store encryption keys is a valid solution for encrypting medical records to prevent compromise if downloaded by a third party.

Submitted by yuriko_h· Mar 30, 2026Develop for Azure storage

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are developing a medical records document management website. The website is used to store scanned copies of patient intake forms. If the stored intake forms are downloaded from storage by a third party, the contents of the forms must not be compromised. You need to store the intake forms according to the requirements. Solution: 1. Create an Azure Key Vault key named skey. 2. Encrypt the intake forms using the public key portion of skey. 3. Store the encrypted data in Azure Blob storage. Does the solution meet the goal?

Options

  • AYes
  • BNo

How the community answered

(48 responses)
  • A
    83% (40)
  • B
    17% (8)

Why each option

Creating an Azure Key Vault secret to store encryption keys is a valid solution for encrypting medical records to prevent compromise if downloaded by a third party.

AYesCorrect

Creating an Azure Key Vault to securely store encryption keys is a foundational step for implementing robust data encryption. By using these keys to encrypt sensitive intake forms before storage, and carefully managing access to these keys via Key Vault, the data remains protected and unreadable even if downloaded by an unauthorized third party without the necessary decryption key.

BNo

The proposed solution to use Azure Key Vault for encryption keys is a valid and recommended method for securing sensitive data against unauthorized access.

Concept tested: Data encryption using Azure Key Vault

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest

Topics

#Blob Storage#lifecycle management#access tiers#document management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-204 Practice