nerdexam
Microsoft

AZ-500 · Question #292

Drag and Drop Question You have an Azure subscription. You plan to create a storage account. You need to use customer-managed keys to encrypt the tables in the storage account. From Azure Cloud…

The correct answer is New-AzStorageAccount; New-AzStorageAccountKey; New-AzStorageTable. To use customer-managed keys (CMK) for encrypting tables in a new Azure Storage account, you must first create the storage account with New-AzStorageAccount, then generate or retrieve the storage account key using New-AzStorageAccountKey (which is needed to configure CMK…

Submitted by emma.c· Mar 6, 2026Implement and manage data security - specifically configuring encryption with customer-managed keys for Azure Storage using Azure PowerShell (AZ-104 / AZ-500 domain: Secure Data and Applications / Manage Storage)

Question

Drag and Drop Question You have an Azure subscription. You plan to create a storage account. You need to use customer-managed keys to encrypt the tables in the storage account. From Azure Cloud Shell, which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order. Answer:

Exhibit

AZ-500 question #292 exhibit

Answer Area

Drag items

New-AzStorageAccountKeyNew-AzStorageTableRegister-AzProviderFeatureNew-AzStorageAccountRegister-AzResourceProvider

Correct arrangement

  • New-AzStorageAccount
  • New-AzStorageAccountKey
  • New-AzStorageTable

Explanation

To use customer-managed keys (CMK) for encrypting tables in a new Azure Storage account, you must first create the storage account with New-AzStorageAccount, then generate or retrieve the storage account key using New-AzStorageAccountKey (which is needed to configure CMK encryption), and finally create the table with New-AzStorageTable. This sequence ensures the storage account exists and is properly configured before the table is created within it.

Topics

#Azure Storage#Customer-Managed Keys#PowerShell Cmdlets#Data Encryption

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice