SC-100 Free Practice Test

- (Exam Topic 3)
You are designing security for an Azure landing zone. Your company identifies the following compliance and privacy requirements:
• Encrypt cardholder data by using encryption keys managed by the company.
• Encrypt insurance claim files by using encryption keys hosted on-premises.
Which two configurations meet the compliance and privacy requirements? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

1. A. Store the insurance claim data in Azure Blob storage encrypted by using customer-provided keys.
2. B. Store the cardholder data in an Azure SQL database that is encrypted by using keys stored in Azure Key Vault Managed HSM
3. C. Store the insurance claim data in Azure Files encrypted by using Azure Key Vault Managed HSM.
4. D. Store the cardholder data in an Azure SQL database that is encrypted by using Microsoft-managed Keys.

Correct Answer: AC
https://azure.microsoft.com/en-us/blog/customer-provided-keys-with-azure-storage-service-encryption/