AZ104-Q: meet a customer-managed-key requirement
A policy requires a storage account’s encryption keys to be controlled by the organization rather than solely platform-managed. What should the administrator configure?
- A) A public container with HTTPS only.
- B) A storage-account tag named
CMK. - C) Customer-managed keys from Azure Key Vault, after validating the supported account and key-access configuration. ✓
- D) A SAS token with write access. Answer: C. Customer-managed keys provide organizational key control when the service and configuration support them. Why not the others: HTTPS, tags, and SAS do not select encryption-key management.