MENU
You are designing the encryption standards for data at rest for an Azure resource
You need to provide recommendations to ensure that the data at rest is encrypted by using AES-256 keys. The solution must support rotating the encryption keys monthly.
Solution: For blob containers in Azure Storage, you recommend encryption that uses customer-managed keys (CMKs).
Does this meet the goal?
Suggested Answer: A
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
NO
Noel
11 months ago
Are we sure monthly rotation is feasible with CMKs?
AL
Alyce
11 months ago
This is the right approach for secure data at rest!
ME
Melvin
12 months ago
I thought CMKs had some limitations though?
DE
Denny
12 months ago
Totally agree, this meets the requirements perfectly.
MA
Marcos
1 year ago
Yes, CMKs support AES-256 and key rotation!
CA
Carey
1 year ago
I feel like this is a tricky one. I thought CMKs were the right approach, but I’m not confident they meet all the requirements for key rotation.
LE
Leonard
1 year ago
I believe the answer is yes because CMKs allow for key management, but I need to double-check if they specifically support monthly rotations.
GI
Giuseppe
1 year ago
I remember practicing a similar question where we discussed the importance of AES-256, but I can't recall if CMKs automatically support monthly rotations.
LI
Lizbeth
1 year ago
I think using customer-managed keys for blob containers does meet the goal, but I'm not entirely sure if it covers the key rotation requirement.
DA
Dalene
1 year ago
This question seems straightforward. The objectives of a Retrospect Sprint Meeting are clearly outlined, so I think I can eliminate the options that don't match.
AL
Aliza
1 year ago
I'm a bit confused on the best approach here. On one hand, I can see the value in giving Brianna advance notice to avoid resentment. But on the other hand, if she's really protective of her boyfriend, she might just use that time to prepare her answers and clam up even more. I'm kind of leaning towards option D and trying to avoid interviewing her if possible, but that might not be the best strategy either.
KA
Kate
1 year ago
I'm a bit confused by this one. Let me go through the options and see if I can eliminate any of the choices.
TA
Tamekia
1 year ago
Hmm, I'm a little unsure about this one. I know DevOps is all about continuous delivery, but I'm not sure which specific principle is needed for daily releases. I'll have to think this through carefully.
OR
Oretha
1 year ago
I'm not completely sure, but wasn't Terraform meant for infrastructure as code? Seems like it could fit for orchestration too, right?