Designing and Implementing an Azure AI Solution (legacy) — Question 32

You are designing the infrastructure for an AI solution that will analyze data stored in Azure Blob storage.
You want to encrypt the storage account by using a key generated by the hardware security module (HSM) of your company.
What should you do first?

Answer options

• A. Enable encryption with customer-managed keys.
• B. Generate an access key.
• C. Generate an encryption key.
• D. Configure a service endpoint for the storage account.

Correct answer: D

Explanation

The first step in this process is to configure a service endpoint for the storage account, as it allows secure connectivity between your Azure resources. Without this configuration, other steps related to encryption cannot be effectively implemented. The other options, while related to security, do not directly address the initial requirement of establishing a secure connection for the storage account.