A registry must encrypt images with a customer-managed key (CMK) stored in Azure Key Vault. Which SKU supports this?

1. A Basic
2. B Standard
3. ✓ C Premium (correct answer)
4. D All SKUs

Shortcut: Customer-managed key encryption for ACR is a Premium-only feature. The CMK must be in an Azure Key Vault in the same region.