What should you do first?

You have an Azure subscription that contains an Azure Data Factory version 2 (V2) data factory named df1.

DF1 contains a linked service.

You have an Azure Key vault named vault1 that contains an encryption kay named key1.

You need to encrypt df1 by using key1.

What should you do first?
A . Disable purge protection on vault1.
B . Remove the linked service from df1.
C . Create a self-hosted integration runtime.
D . Disable soft delete on vault1.

Answer: B

Explanation:

A customer-managed key can only be configured on an empty data Factory. The data factory can’t contain any resources such as linked services, pipelines and data flows. It is recommended to enable customer-managed key right after factory creation.

Note: Azure Data Factory encrypts data at rest, including entity definitions and any data cached while runs are in progress. By default, data is encrypted with a randomly generated Microsoft-managed key that is uniquely assigned to your data factory.

Reference: https://docs.microsoft.com/en-us/azure/data-factory/enable-customer-managed-key