Richard is a Cloud Security Engineer of Whizlabs Inc. As part of the enterprise data lake project, he is assigned to implement encryption strategy & key/secrets for Azure data storage. The project’s data sources are ERP, CRM/SAP systems containing static files stored in Azure file storage. The key should be stored in the Azure Key vault or Key vault HSM. 
As part of the server-side encryption (SSE) feature of Azure storage, he’d be required to specify the encryption key type while enabling the encryption in the Azure storage account. 
Which of the following kinds of Azure storage encryption keys can he use in this scenario?

Answer options:

A.Microsoft-managed
B.Customer-provided
C.Customer-managed
D.Microsoft-managed & Customer-provided

Correct Answer: C 

https://docs.microsoft.com/en-us/azure/storage/common/storage-service-encryption