An organization requires that all data stored in Azure AI Search be encrypted with keys managed by the organization rather than Microsoft-managed keys. Which Azure feature provides this capability?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because Azure AI Search supports Customer-Managed Keys (CMK) through Azure Key Vault integration. When configured, index data and synonym maps are encrypted at rest using a key stored in your Key Vault that you control—you can revoke access, rotate keys, and maintain cryptographic control.
Full explanation below image
Full Explanation
B is correct because Azure AI Search supports Customer-Managed Keys (CMK) through Azure Key Vault integration. When configured, index data and synonym maps are encrypted at rest using a key stored in your Key Vault that you control—you can revoke access, rotate keys, and maintain cryptographic control. Microsoft never has access to your keys. A is wrong because Azure Disk Encryption applies to IaaS VM disks, not PaaS service data storage like Azure AI Search. C is wrong because Azure Storage Service Encryption with customer-provided keys applies to Azure Blob and File storage operations; Azure AI Search has its own CMK mechanism at the service level. D is wrong because TLS 1.3 protects data in transit, not data at rest.