Valid AI-200 Dumps shared by ExamDiscuss.com for Helping Passing AI-200 Exam! ExamDiscuss.com now offer the newest AI-200 exam dumps, the ExamDiscuss.com AI-200 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com AI-200 dumps with Test Engine here:
You are developing a Java application to be deployed in Azure. The application stores sensitive data in Azure Cosmos DB. You need to configure Always Encrypted to encrypt the sensitive data inside the application. What should you do first?
Correct Answer: C
Detailed Explanation: For Cosmos DB Always Encrypted, the key hierarchy starts with a customer-managed key held in Azure Key Vault. The data encryption key used by the client is protected by that customer- managed key. Microsoft's setup sequence therefore begins by preparing Key Vault and the CMK before creating DEKs or an encryption policy. Creating a managed identity, a container policy, or a DEK can be necessary later, but none precedes establishing the CMK that protects the client-side encryption key material. Study Guide Alignment: AI data-management workloads: Cosmos DB, PostgreSQL, caching, vector storage, vector retrieval, consistency, and connection optimization. Official Microsoft Learn References: AI-200 Study Guide | Always Encrypted for Azure Cosmos DB
