Correct Answer: Azure Storage encryption with Azure Key Vault (CMK) and Storage logging enabled
Using CMK in Key Vault provides full control over keys, and storage logging ensures that every access attempt is audited....
Correct Answer
Azure Storage encryption with Azure Key Vault (CMK) and Storage logging enabled
Why This Answer Is Correct
Using CMK in Key Vault provides full control over keys, and storage logging ensures that every access attempt is audited.
This question evaluates your knowledge of Azure Blob Storage — a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Azure Blob Storage is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?
You are designing a data storage strategy for a massive data lake. You need a solution that supports hierarchical namespaces (directories) for high-performance analytics and integrates with Azure Active Directory for fine-grained access control. Which storage option fits?
Which Azure storage feature allows you to automatically move older, infrequently accessed data from the 'Hot' tier to the 'Cool' or 'Archive' tiers based on its age to save costs?
How can you securely provide access to an Azure storage account for a 3rd-party user for a specific period of time (e.g., 2 hours) without sharing the storage account key or creating an Azure AD account for them?