Câu 20: AI-200: Developing AI Cloud Solutions on Azure

You are developing a Java application to be deployed in Azure. The application stores sensitive data in Azure Cosmos D B. You need to configure Always Encrypted to encrypt the sensitive data inside the application. What should you do first?

1. A. Create a customer-managed key (CMK) and store the key in a new Azure Key Vault instance. — đáp án hiện tại
2. B. Create a data encryption key (DEK) by using the Azure Cosmos DB SDK and store the key in Azure Cosmos DB.
3. C. Create a Microsoft Entra ID managed identity and assign the identity to a new Azure Key Vault instance.
4. D. Create a new container to include an encryption policy with the JSON properties to be encrypted.