Practice question 462 of 498 · hard

A critical service uses customer-managed keys and private networking. Which three checks are necessary to validate the design? Select three.

Select all that apply. Every correct option and no extras are required for credit in the app.

1. A.Assume at-rest encryption prevents all export by authorized applications
2. B.Test rotation and recovery dependencies without losing data availability
3. C.Verify transport protection and endpoint validation on relevant access paths
4. D.Verify the service identity has only required key permissions and can reach the key service
5. E.Assume network isolation automatically grants data and key authorization

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.