Secure, monitor, and optimize data storage and data processing →mediumMultiple ChoiceObjective-mapped

DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing

Exhibit

Refer to the exhibit.

{
  "encryption": {
    "keySource": "Microsoft.Keyvault",
    "keyvaultproperties": {
      "keyvaulturi": "https://mykeyvault.vault.azure.net/",
      "keyname": "mykey",
      "keyversion": "1"
    }
  }
}

You are reviewing the ARM template snippet for an Azure Data Lake Storage Gen2 account. The template fails to deploy with an error that the encryption key cannot be accessed. What is the most likely cause?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The Data Lake Storage account does not have Get and Wrap Key permissions on the key vault.

The error occurs because the Data Lake Storage Gen2 account uses a customer-managed key from a key vault for encryption. The account's managed identity must have the 'Get' and 'Wrap Key' permissions on the key vault to access the key. Without these permissions, the deployment fails. Option B correctly identifies this. Option A (soft-delete) is not required for initial access but is recommended for protection. Option C (key name/version) would cause a different error (key not found). Option D (URI format) would also cause a different error.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The key vault does not have soft-delete enabled.
Why it's wrong here
Soft-delete is not required for encryption key access.
✓
The Data Lake Storage account does not have Get and Wrap Key permissions on the key vault.
Why this is correct
The storage account's identity must have these permissions to use the key.
✗
The key name or version is incorrect.
Why it's wrong here
The key name and version are specified.
✗
The key vault URI is incorrectly formatted.
Why it's wrong here
The URI appears correctly formatted.

Go deeper

DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question