AZ-104: Microsoft Azure Administrator Full Course - Customer Managed Keys

The video tutorial explains the use of customer managed keys for encryption, offering more control and flexibility compared to Microsoft-managed keys. It covers the process of creating and storing encryption keys in Azure Key Vault, and how to use these keys with Storage Service Encryption (SSE). The tutorial also discusses the configuration requirements for Key Vault and storage accounts, including regional and subscription considerations.

What is the primary benefit of using customer managed keys?

• They are cheaper than Microsoft managed keys.

• They provide faster encryption processes.

• They allow users to manage their own encryption keys.

• They are automatically updated by Microsoft.

Where should you store your encryption keys for better management?

• In a cloud storage service.

• In a local database.

• On a USB drive.

• In a key vault.

What is one of the advantages of using custom keys?

• They require no auditing.

• They are automatically rotated by Microsoft.

• They offer more flexibility and control.

• They are less secure than Microsoft managed keys.

What is a requirement for using customer managed keys with SSE?

• The storage account must be in a different subscription than the key vault.

• The key vault must be managed by Microsoft.

• The storage account and key vault must be in different regions.

• The storage account and key vault must be in the same region.

Can the key vault and storage account be in different subscriptions?

• Only if they are managed by Microsoft.

• No, they must be in the same subscription.

• Yes, they can be in different subscriptions.

• Only if they are in the same region.