A storage account uses a customer-managed key. The team assumes that this automatically adds infrastructure encryption. What is the correct assessment?

Choose the single best answer.

A.Customer-managed keys automatically block every authorized data reader
B.Key ownership and infrastructure double encryption are separate settings and requirements
C.Infrastructure encryption disables service encryption
D.Customer-managed keys always imply two independent encryption layers

Show the answer and explanation

✓ Correct answer

Key ownership and infrastructure double encryption are separate settings and requirements

Customer-managed keys control service-level key management; infrastructure encryption adds a distinct layer. It does not disable service encryption, and key ownership does not automatically remove valid service data access.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.