Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us [email protected]
Menu

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
Microsoft Discussions

Exam AZ-305 topic 1 question 23 discussion

Actual exam question from Microsoft's AZ-305
Question #: 23
Topic #: 1
[All AZ-305 Questions]

You plan to deploy an app that will use an Azure Storage account.
You need to deploy the storage account. The storage account must meet the following requirements:
✑ Store the data for multiple users.
✑ Encrypt each user's data by using a separate key.
✑ Encrypt all the data in the storage account by using customer-managed keys.
What should you deploy?

  • A. files in a premium file share storage account
  • B. blobs in a general purpose v2 storage account
  • C. blobs in an Azure Data Lake Storage Gen2 account
  • D. files in a general purpose v2 storage account
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
You can specify a customer-provided key on Blob storage operations. A client making a read or write request against Blob storage can include an encryption key on the request for granular control over how blob data is encrypted and decrypted.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-service-encryption
by kay000001 at Sept. 13, 2022, 7:03 a.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
kay000001
Highly Voted 1 year, 7 months ago
Selected Answer: B
B. blobs in a general purpose v2 storage account
upvoted 20 times
TaoLu
5 months, 3 weeks ago
az storage container create --name <container_name> --public-access off --metadata encryptionScope="<customer_managed_key_url>"
upvoted 2 times
...
...
NotMeAnyWay
Highly Voted 1 year, 1 month ago
Selected Answer: B
B. blobs in a general purpose v2 storage account A General Purpose v2 (GPv2) storage account can store blobs, files, queues, and tables, making it a versatile option for a wide range of applications. It supports customer-managed keys for encryption, allowing you to maintain control over the encryption keys. To encrypt each user's data with a separate key, you can use Azure Blob Storage Service Encryption with customer-managed keys, storing each user's data in separate containers, and then configuring separate encryption keys for each container.
upvoted 17 times
malcubierre
7 months ago
I don't think you can choose different keys on every container.... contiguration is at storage level, not container.
upvoted 1 times
...
sieira
7 months, 3 weeks ago
Thanks for sharing this point of view.
upvoted 1 times
...
...
MelKr
Most Recent 1 month ago
Selected Answer: B
At the time the question was designed only B would have been correct. Currently, C is also correct. The question requires support for two features: 1. Encryption scopes (different users encrypt with different keys) 2. Customer managed keys with key vault https://learn.microsoft.com/en-us/azure/storage/blobs/storage-feature-support-in-storage-accounts: Check for current support of these features for the different types of blob storage configurations.
upvoted 1 times
...
ManosCaptain
5 months, 1 week ago
Appeared on 11/21/2023
upvoted 6 times
...
Sandeep1981
11 months, 3 weeks ago
Selected Answer: B
B is the answer
upvoted 3 times
...
zellck
1 year, 2 months ago
Selected Answer: B
B is the answer. https://learn.microsoft.com/en-us/azure/storage/common/storage-service-encryption#about-encryption-key-management You can specify a customer-provided key on Blob Storage operations. A client making a read or write request against Blob Storage can include an encryption key on the request for granular control over how blob data is encrypted and decrypted.
upvoted 7 times
zellck
1 year, 2 months ago
https://learn.microsoft.com/en-us/azure/storage/blobs/encryption-customer-provided-keys Clients making requests against Azure Blob storage can provide an AES-256 encryption key to encrypt that blob on a write operation. Subsequent requests to read or write to the blob must include the same key. Including the encryption key on the request provides granular control over encryption settings for Blob storage operations. Customer-provided keys can be stored in Azure Key Vault or in another key store.
upvoted 4 times
...
...
jj22222
1 year, 2 months ago
Selected Answer: B
blobs in a general purpose v2 storage account
upvoted 1 times
...
Ilky
1 year, 2 months ago
ADLS GEN 2 DOES NOT SUPPORT CMK ON THE FLY, HENCE B
upvoted 1 times
Lazylinux
3 weeks, 5 days ago
Do Not shout we are deaf!!!
upvoted 2 times
...
...
Joule
1 year, 2 months ago
Selected Answer: C
B. Blobs in an Azure Data Lake Storage Gen2 account would be the best option to meet the given requirements. Azure Data Lake Storage Gen2 offers support for object storage and is designed to store and analyze large amounts of unstructured data. It also offers the ability to use customer-managed keys for encryption and supports the use of Azure Key Vault. Additionally, ADLS Gen2 offers a hierarchical namespace, which makes it easy to manage large data sets and access them efficiently.
upvoted 2 times
...
sainandam
1 year, 2 months ago
B - HNS does not support encryption keys on request. https://learn.microsoft.com/en-us/azure/storage/blobs/encryption-customer-provided-keys
upvoted 2 times
...
OPT_001122
1 year, 3 months ago
Selected Answer: B
B. blobs in a general purpose v2 storage account
upvoted 2 times
...
VBK8579
1 year, 3 months ago
Answer C
upvoted 1 times
...
armpro
1 year, 3 months ago
Selected Answer: B
Ans: B Only blobs can use customer provided keys for container level or blob level custom encryption https://learn.microsoft.com/en-us/azure/storage/common/storage-service-encryption#about-encryption-key-management
upvoted 1 times
...
[Removed]
1 year, 3 months ago
Selected Answer: B
Obviously B
upvoted 1 times
...
sporting1
1 year, 4 months ago
I'm a bit confused. What is the difference between B and C?
upvoted 2 times
MadSysadmin
1 year, 3 months ago
B and C are different, eg. Data Lake Storage supports paths and subdirectories
upvoted 1 times
...
Mltytskr
1 year, 3 months ago
Data Lake on GPv2 means hierarchical namespace (HNS) is enabled, and according to: https://learn.microsoft.com/en-us/azure/storage/blobs/storage-feature-support-in-storage-accounts, HNS does not support customer-managed keys so it would have to be B.
upvoted 9 times
Mltytskr
1 year, 3 months ago
Sorry, meant customer-provided, not managed, which I think is required because of "Encrypt each user's data by using a separate key." Open to correction.
upvoted 4 times
...
...
...
Born_Again
1 year, 4 months ago
Selected Answer: B
B. blobs in a general purpose v2 storage account
upvoted 1 times
...
leoletopic
1 year, 4 months ago
is "Encrypt each user's data by using a separate key." means "Provide an encryption key on a request to Blob storage" reference : https://learn.microsoft.com/en-us/azure/storage/blobs/encryption-customer-provided-keys if so ,this feature not support Data Lake Storage Gen2, Network File System (NFS) 3.0 protocol, or the SSH File Transfer Protocol (SFTP) So, I think it is B
upvoted 2 times
Backy
1 year, 4 months ago
This reference does not say such things, it merely states that Data Lake support for encryption scopes is in Preview. However, the actual Azure storage account for Data Lake does not mention any preview and provides full support for encryption scopes. Apparently, the Microsoft docs have not been updated yet. Probably, this is very old question. Today, both B and C are correct answers to this question
upvoted 3 times
...
...
Load full discussion...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel