Exam AI-102 topic 1 question 12 discussion

Should be ABF (use AKV for customer managed key)

The index size will increase is CORRECT because enabling server-side encryption with customer-managed keys (CMK) typically results in some overhead, causing the index size to increase due to the encryption metadata. Query times will increase is CORRECT because the encryption and decryption processes add computational overhead, which can lead to longer query times. Azure Key Vault is required is CORRECT because customer-managed keys (CMK) for server-side encryption in Azure Cognitive Search are stored and managed in Azure Key Vault. Answer is ABF

The provided answers are correct.

"E" should read Query performance will decrease

A, B, F

Coffee gift is ABF.

Based on the information from Microsoft’s documentation12, the implications of enabling server-side encryption and using customer-managed keys (CMK) stored in Azure for Azure Cognitive Search are: A. The index size will increase. Enabling CMK encryption increases the index size1. B. Query times will increase. Enabling CMK encryption degrades query performance. You can expect to see an increase of 30-60 percent in query times1. F. Azure Key Vault is required. CMK encryption depends on Azure Key Vault. You can create your own encryption keys and store them in a key vault, or you can use Azure Key Vault APIs to generate encryption keys1. So, the correct answers are A, B, and F. Please note that these changes might also lead to additional costs2. It’s always a good idea to review the Azure pricing details before making such changes.

Based on the Azure documentation and best practices for Azure Cognitive Search with server-side encryption using customer-managed keys (CMKs), it appears that the correct answers to the question are B and F. Enabling CMKs is known to potentially increase query times due to the additional encryption/decryption steps required when data is requested (B). Azure Key Vault is required to store and manage these CMKs, making it a necessary component of the configuration (F). There is no indication in the documentation that index size will be affected (A and D), nor that query times will decrease (E), and a self-signed X.509 certificate is not mentioned as a requirement (C).

ABE can't be the right answer. B and E are conflicting

I think this answer highlights why you should come to the comments and do your own research. The answer here says the query time will both increase AND decrease, which doesn't make sense. The answer is ABF, not ABE

The query PERFORMANCE will decrease, a typo?

The E is wrong! The query time will increase with CMK

Customer-managed keys require another billable service, Azure Key Vault, which can be in a different region, but under the same subscription, as Azure AI Search. Enabling CMK encryption will increase index size and degrade query performance. Based on observations to date, you can expect to see an increase of 30-60 percent in query times, although actual performance will vary depending on the index definition and types of queries. Because of the negative performance impact, we recommend that you only enable this feature on indexes that really require it.

Correct answer to me are A,B,F. AKV needed to store CMK

A,B: "Enabling CMK encryption will increase index size and degrade query performance" F: "Customer-managed keys require another billable service, Azure Key Vault, which can be in a different region, but under the same subscription, as Azure Cognitive Search." https://learn.microsoft.com/en-us/azure/search/search-security-overview#data-protection

Why would the index size increase? You are not adding any data to it...

Enabling CMK encryption will increase index size and degrade query performance. And you need a key vault to store the keys https://learn.microsoft.com/en-us/azure/search/search-security-overview#data-protection