Microsoft
SC-100 · Question #328
Drag and Drop Question You have an Azure Storage account named storage1. You plan to secure storage1 by using a Bring Your Own Key (BYOK) strategy. You create an Azure key vault named AKV1 and upload
Sign in or unlock SC-100 to reveal the answer and full explanation for question #328. The question stem and answer options stay visible for context.
Design security solutions for applications and data
Question
Drag and Drop Question You have an Azure Storage account named storage1. You plan to secure storage1 by using a Bring Your Own Key (BYOK) strategy. You create an Azure key vault named AKV1 and upload a compatible key. You need to configure storage1 to use the key stored in AKV1 for encryption. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:
Exhibits
Answer Area
Drag items
Assign storage1 the Key Vault Reader role to access the key.Create and assign an access policy for storage1.Create a managed identity and assign it to AKV1.Create and assign a Key Vault access policy.Configure Azure Storage encryption with customer-managed keys.
Unlock SC-100 to see the answer
You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Azure Storage#Customer-managed keys (CMK)#Azure Key Vault#Managed Identity