You have an Azure subscription that contains an Azure Cosmos DB for NoSQL account named Account1 and an Azure key vault named Vault1.

You plan to enable customer-managed keys and use an encryption key stored in Vault1 to encrypt data at rest.

You need to configure Account1 to use the key from Vault1. The solution must ensure that Account1 continues to operate if the key is rotated in Vault1.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.