Exam AZ-801 topic 1 question 25 discussion

Actual exam question from Microsoft's AZ-801

Question #: 25
Topic #: 1

DRAG DROP
-

You have an Azure subscription that contains an Azure key vault named Vault1.

You plan to deploy a virtual machine named VM1 that will run Windows Server.

You need to enable encryption at host for VM1. The solution must use customer-managed keys.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Show Suggested Answer

Suggested Answer:

by alzdashti at Sept. 27, 2023, 7:37 p.m.

Comments

Submit Cancel

alzdashti

Highly Voted 1 year, 8 months ago

The answer is wrong. The correct answer is: 1- Create a disk encryption set and generate RSA keys. 2- Grant Vault1 the managed identity permission for the disk encryption ser. 3- Create VM1 and associate the disks of the virtual machine with the disk encryption https://learn.microsoft.com/en-us/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell

upvoted 32 times

Disguster

1 year, 8 months ago

Agree, and provided link supports it.

upvoted 5 times

...

BlackCat9588

Most Recent 4 months, 1 week ago

Create a disk encryption set and generate RSA keys. Grant Vault1 the managed idenetity permission for the disk encryption set. Create VM1 and associate the disks of the virtual machnine with the disk encryption set

upvoted 2 times

...

Vallion

8 months, 2 weeks ago

1. Set up your Azure Key Vault 2. Add an Azure RBAC role (for access to the vault) 3. Set up your disk encryption set 4. Deploy a VM (On the Disks pane, choose Host Based encryption)

upvoted 1 times

...