StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Object, file, and NoSQL data

Practice question 152 of 400 · medium

An attacker with valid storage read authorization downloads plaintext despite service-side encryption. What explains this?

Choose the single best answer.

  1. A.Encryption at rest protects stored data, while authorization still allows permitted readers to receive plaintext
  2. B.A private endpoint alone prevents every authorized client from exporting data
  3. C.At-rest encryption should always reject every authorized read
  4. D.Customer-managed keys replace all identity and data-permission controls
Show the answer and explanation

✓ Correct answer

  • Encryption at rest protects stored data, while authorization still allows permitted readers to receive plaintext

At-rest encryption protects stored media rather than denying authorized reads. Customer-managed keys do not replace identity/data permissions. A private endpoint limits the network path but does not prohibit a permitted client from reading or exporting data. Source guide: PDF page 29.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.