You have an Azure subscription

You plan to deploy a new storage account

You need to configure encryption for the account The solution must meet the following requirements

• Use a customer-managed key stored in an key vault

• Use the maximum supported bit length.

Which type of key and which bit length should you use?