Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 5 question 37 discussion

Actual exam question from Microsoft's AZ-500

Question #: 37
Topic #: 5

DRAG DROP -
You have an Azure subscription.
You plan to create a storage account.
You need to use customer-managed keys to encrypt the tables in the storage account.
From Azure Cloud Shell, which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/azure/storage/common/customer-managed-keys-configure-key-vault?tabs=powershell

by sudarchary at Nov. 11, 2021, 1:48 a.m.

Comments

Submit Cancel

majstor86

Highly Voted 10 months ago

New-AzStorageAccount New-AzStorageAccountKey New-AzStorageTable

upvoted 10 times

Hot_156

3 months, 3 weeks ago

This question doesn't make sense, so it could be outdated! You don't use New-AzStorageAccountKeys if you want to use user-managed keys.

upvoted 1 times

...

tutonata

Most Recent 10 months ago

Why would you have to regenerate the access key ? Is this a mistake ? You need to generate a Keyvault encryption key when you use customer provided keys, NOT storage account keys. Should be Add-AzKeyvVaultKey commandlet... I do not get why we need to regen SA key at all since tney get created when you issue the New-AzStorageAccount commandlet. It's not like the existing key has been compromised...

upvoted 2 times

...

CeliaZhou

1 year ago

This is very confusing, since New-AzStorageAccountKey is used to generage a key access key for storage account instead of encrytion key, for encryption you only need to run New-AzStorageAccount New-AzStorageAccount -ResourceGroupName <resource_group> ` -AccountName <storage-account> ` -Location <location> ` -SkuName "Standard_RAGRS" ` -Kind StorageV2 ` -EncryptionKeyTypeForTable Account ` -EncryptionKeyTypeForQueue Account https://learn.microsoft.com/en-us/powershell/module/az.storage/new-azstorageaccountkey?view=azps-9.2.0 https://learn.microsoft.com/en-us/azure/storage/common/account-encryption-key-create?tabs=powershell

upvoted 3 times

Fal991l

12 months ago

Agree.

upvoted 1 times

Fal991l

12 months ago

But, the question is 'You need to use customer-managed keys to encrypt the tables in the storage account'. so the answer is right.

upvoted 2 times

...

licna

1 year, 12 months ago

Following the given link for explanation it seems that the last option is not correct. It should be "Set-AzStorageAccount" instead (which is missing so it can not be chosen). Also what sense it would make to deal with Azure Tables in this scenario, right?

upvoted 2 times

waqas

1 year, 12 months ago

read the line "You need to use customer-managed keys to encrypt the TABLES in the storage account"

upvoted 5 times

licna

1 year, 11 months ago

You are right, I did not notice that. Then the answer might be correct. Anyway, this question is a bit strange for MS security exam.

upvoted 3 times

...

sudarchary

2 years, 1 month ago

Correct Answer

upvoted 4 times

...