Microsoft
SC-100 · Question #30
You are designing security for an Azure landing zone. Your company identifies the following compliance and privacy requirements: - Encrypt cardholder data by using encryption keys managed by the compa
Sign in or unlock SC-100 to reveal the answer and full explanation for question #30. The question stem and answer options stay visible for context.
Design security solutions for applications and data
Question
You are designing security for an Azure landing zone. Your company identifies the following compliance and privacy requirements:
- Encrypt cardholder data by using encryption keys managed by the
company.
- Encrypt insurance claim files by using encryption keys hosted on-
premises. Which two configurations meet the compliance and privacy requirements? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- AStore the insurance claim data in Azure Blob storage encrypted by using customer-provided keys.
- BStore the cardholder data in an Azure SQL database that is encrypted by using keys stored in
- CStore the insurance claim data in Azure Files encrypted by using Azure Key Vault Managed HSM.
- DStore the cardholder data in an Azure SQL database that is encrypted by using Microsoft-
Unlock SC-100 to see the answer
You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Azure data encryption#Customer-managed keys (CMK)#Customer-provided keys (CPK)#Data compliance