Exam SC-100 topic 4 question 47 discussion

Actual exam question from Microsoft's SC-100

Question #: 47
Topic #: 4

HOTSPOT
-

You have an Azure subscription that contains multiple storage accounts. The accounts contain Azure Files shares and Azure Blob Storage containers. The accounts have encryption scopes and infrastructure encryption enabled.

You need to implement customer-managed key-based encryption for the shares and the containers. The solution must ensure that the encryption keys are applied at the most granular level.

At which level should you apply the encryption keys? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by 676ae1a at Feb. 2, 2025, 11:10 a.m.

Comments

Submit Cancel

RoboCock

2 months, 1 week ago

Blob and File share. For Azure File shares, the most granular level at which encryption can be applied is the share level, not the file level. Customer-managed keys (CMKs) can secure the entire file share, but not individual files within the share.

upvoted 1 times

...

424ede1

2 months, 1 week ago

Blob Account When you configure customer-managed keys for a storage account, Azure Storage wraps the root data encryption key for the account. By default, a storage account is encrypted with a key scoped to the entire storage account. When you define an encryption scope, you specify a key that may be scoped to a container or an individual blob. https://learn.microsoft.com/en-us/azure/storage/blobs/encryption-scope-overview#how-encryption-scopes-work

upvoted 1 times

...

sweetykaur

4 months, 1 week ago

Blob and File

upvoted 3 times

...

tuyi2

4 months, 1 week ago

1. Blob 2. File

upvoted 2 times

...