Correct Answer:

Explanation:
Detailed Explanation
Azure Storage encryption with customer-managed keys uses envelope/key-wrapping encryption, which requires an asymmetric key stored in Azure Key Vault - specifically RSA or RSA-HSM. AES and 3DES are symmetric algorithms and are not supported as the customer-managed wrapping key type for Storage Service Encryption. Azure Key Vault supports RSA key sizes of 2048, 3072, and 4096 bits for both software- protected and HSM-protected keys; 8192 is not a supported RSA key size in Key Vault. Therefore the maximum supported bit length is 4096. The exhibit ' s highlighted selections (RSA, 4096) already match these platform limits, so the answer requires no correction.
Official Reference
Customer-managed keys for Azure Storage encryption - https://learn.microsoft.com/en-us/azure/storage
/common/customer-managed-keys-overview

Correct Answer: A  🗳️

Explanation: Only visible for NewPassLeader members. You can sign-up / login (it's free).

Correct Answer:

Explanation:
Detailed Explanation
The case study only names two concrete storage needs: moving the blueprint files into Blob storage (explicitly requiring Blob support and the Archive access tier) and using unmanaged standard storage for VM OS/data disks. Unmanaged disks in Azure are stored as page blobs inside a general-purpose storage account ' s Blob service, so this requirement also maps to Blob storage, not to Table or File Storage. Nothing in the scenario - no mention of NoSQL key-value data, queued messaging, or SMB file shares needed by the App1 tiers - calls for Azure Table storage or Azure File Storage; App1 ' s tiers are VM-based application/web/SQL servers, not services that persist structured entity data in Table storage or require shared SMB storage. Consequently the only " Yes " answer is Blob storage support; Table storage and Azure File Storage should both be marked " No. " This matches the given hotspot answer and needs no correction.
Official Reference
Azure Blob storage overview - https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blobs-overview

Correct Answer:

Explanation:
CORRECTED ANSWER: Statement 1 (After User2 answers three security questions correctly, he can reset his password immediately): No. Statement 2 (If User1 forgets her password, she can reset the password by using the mobile phone app): No. Statement 3 (User3 can add security questions to the password reset process): No.
Detailed Explanation
SSPR requires 2 authentication methods to reset a password; security questions are only one of the two enabled methods, so User2 answering security questions alone cannot complete a reset immediately - a second method (mobile phone) is still required, making statement 1 No. SSPR is scoped only to Group2, and User1 is a member of Group1 only (not Group2) and holds no admin role, so SSPR is not enabled for her at all; separately, ' mobile app ' (Authenticator notification/code) was never checked as an available method (only ' Mobile phone ' and ' Security questions ' are enabled), so statement 2 is No for two independent reasons. Statement 3 is the key correction: Microsoft Entra explicitly disallows administrator accounts from using security questions as an SSPR verification method - ' Administrator accounts can ' t use security questions as verification method with SSPR. ' Since User3 holds the User Administrator role, User3 cannot add or use security questions in their own password-reset process, regardless of the tenant-wide security- questions setting, so statement 3 is No Official Reference Security questions authentication method - admin restriction - https://learn.microsoft.com/en-us/entra
/identity/authentication/concept-authentication-security-questions