az-104 Practice Question 849
Exam: az-104
Domain: Describe Azure architecture and services
Topic: Describe Azure storage services
Difficulty: medium
You create an Azure Storage account.
You plan to add 10 blob containers to the storage account.
For one of the containers, you need to use a different key to encrypt data at rest.
What should you do before you create the container?
Answer Options
A
Generate a shared access signature (SAS).
B
Modify the minimum TLS version.
C
Rotate the access keys.
D
Create an encryption scope.
Correct Answer
D: Create an encryption scope.
Explanation
Encryption scopes enable you to manage encryption with a key that is scoped to a container or an individual blob. You can use encryption scopes to create secure boundaries between data that resides in the same storage account but belongs to different customers.