Microsoft Exam AZ-204 Topic 2 Question 89 Discussion

Actual exam question for Microsoft's AZ-204 exam

Question #: 89
Topic #: 2

You are developing a Java application to be deployed in Azure. The application stores sensitive data in Azure Cosmos DB. You need to configure Always Encrypted to encrypt the sensitive data inside the application. What should you do first?

ACreate a customer-managed key (CMK) and store the key in a new Azure Key Vault instance.

BCreate an Azure AD managed identity and assign the identity to a new Azure Key Vault instance.

CCreate a data encryption key (DEK) by using the Azure Cosmos DB SDK and store the key in Azure Cosmos DB.

DCreate a new container to include an encryption policy with the JSON properties to be encrypted.

Show Suggested Answer

Suggested Answer: C

by Paz at Mar 19, 2024, 04:21 AM

Limited Time Offer

25%

Off

Get Premium AZ-204 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kerry

8 months ago

That's an interesting point. Storing the key in Cosmos DB might be more efficient for our scenario.

upvoted 0 times

...

Mozell

9 months ago

I think creating a data encryption key using the Cosmos DB SDK is the way to go. It's more closely tied to the application.

upvoted 0 times

...

Elouise

9 months ago

But wouldn't creating a customer-managed key give us more control over the encryption process?

upvoted 0 times

...

Kerry

10 months ago

I disagree. I believe we should create an Azure AD managed identity and assign it to a new Key Vault instance.

upvoted 0 times

...

Elouise

10 months ago

I think we should create a customer-managed key in a new Azure Key Vault.

upvoted 0 times

...

Eulah

11 months ago

Haha, good one, Candidate 5. But seriously, I think the correct answer here is to create a new container with an encryption policy that includes the JSON properties we want to encrypt. That way, we get the benefits of Always Encrypted without having to worry about managing the keys ourselves.

upvoted 0 times

...