Challenge: customer-managed keys and per-clinic scopes

تحدي: Customer-managed keys و Scope لكل عيادة

Requirements only — decide the blades and commands yourself. Use the hint if stuck; reveal the solution only after a real attempt. Healthcare data in contosohealthrec must be encrypted with a key Contoso controls, two clinics need separate encryption scopes, and a new archive account needs double encryption.

The 4 tasks you will do

• Requirement 1 — Key Vault ready for CMKالمطلب 1 — Key Vault جاهز للـ CMK
• Requirement 2 — Switch the account to CMKالمطلب 2 — حوّل الـ Account لـ CMK
• Requirement 3 — One scope per clinicالمطلب 3 — Scope لكل عيادة
• Requirement 4 — Double-encrypted archive accountالمطلب 4 — Account أرشيف عليه Double encryption

The lesson it belongs to

• Storage account encryption: CMK, infrastructure encryption and encryption scopes