AI-200 Event Driven Integration Practice Question
Your application publishes messages to an Azure Service Bus queue. The messages contain sensitive personal data. Enterprise compliance mandates that message payloads are encrypted end-to-end at the application layer before being sent to Service Bus. How should you implement this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Encrypt the message payload in your application code using a key from Azure Key Vault before sending, and decrypt upon receipt.
For end-to-end client-side encryption, the application must encrypt the message payload using an encryption key from Azure Key Vault before serializing and sending it to Service Bus, then decrypt it upon receipt.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Encrypt the message payload in your application code using a key from Azure Key Vault before sending, and decrypt upon receipt.
Why this is correct
Client-side encryption ensures the broker (Service Bus) never sees plaintext data, satisfying strict zero-trust compliance.
- ✗
Configure Event Grid advanced filters to redact sensitive keys.
Why it's wrong here
Event Grid filters inspect properties; they do not encrypt payloads.
- ✗
Enable Service Bus Premium Geo-Disaster Recovery with encryption enabled.
Why it's wrong here
Geo-DR encrypts data at rest on the broker, but does not provide client-side application-layer payload encryption.
- ✗
Use Shared Access Signature tokens with 5-minute expirations.
Why it's wrong here
SAS tokens govern authentication/authorization, not payload encryption.
About these practice questions
This AI-200 question is part of Courseiva's 503-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Microsoft exam blueprint
This AI-200 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-200 exam.