exam questions

Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 3 question 37 discussion

Actual exam question from Microsoft's AZ-500
Question #: 37
Topic #: 3
[All AZ-500 Questions]

HOTSPOT -
You have two Azure virtual machines in the East US 2 region as shown in the following table.

You deploy and configure an Azure Key vault.
You need to ensure that you can enable Azure Disk Encryption on VM1 and VM2.
What should you modify on each virtual machine? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
VM1: The Tier -
The Tier needs to be upgraded to standard.
Disk Encryption for Windows and Linux IaaS VMs is in General Availability in all Azure public regions and Azure Government regions for Standard VMs and VMs with Azure Premium Storage.

VM2: The type -
Need to change the VMtype to any of A, D, DS, G, GS, F, and so on, series IaaS VMs.
Not the operating system version: Ubuntu 16.04 is supported.
References:
https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-overview https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-faq#bkmk_LinuxOSSupport

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
dirgiklis
Highly Voted 4 years, 9 months ago
Answer is correct. VM1: A-series have two tiers Basic and Standard (Basic is not supported) VM2: L4s is Generation 2 VM size (G2 is not supported) https://docs.microsoft.com/en-us/azure/virtual-machines/linux/generation-2
upvoted 53 times
AZGregor
3 years, 11 months ago
According to the official AZ-500 Course: "Windows VMs are available in a range of sizes. Azure Disk Encryption is not available on Basic, A-series VMs, or on virtual machines with a less than 2 GB of memory." Therefore, the Tier and Type does not allow disk encryption on VM1.
upvoted 10 times
...
Patchfox
2 years, 11 months ago
Needs an update: L4s is also supported now.
upvoted 8 times
costaluisc
2 years, 4 months ago
From MS Docs: "Azure Disk Encryption is supported on Generation 1 and Generation 2 VMs" https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview#:~:text=PowerShell%20quickstart.-,Supported%20VMs%20and%20operating%20systems,-Supported%20VMs
upvoted 3 times
...
...
gboyega
4 years, 5 months ago
this is CORRECT
upvoted 2 times
...
levo017
4 years, 3 months ago
very thorough, thanks !
upvoted 3 times
...
...
Solanki
Highly Voted 4 years, 7 months ago
Answers are correct. Below links clearly mentioned this. Azure Disk Encryption is not available on Basic, A-series VMs. https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview#supported-vms Azure Disk Encryption is not available on Generation 2 VMs) and Lsv2-series VMs). https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview#supported-vms-and-operating-systems
upvoted 13 times
aythan09
4 years, 6 months ago
A L4s is not a LsV2. https://azure.microsoft.com/en-us/pricing/details/virtual-machines/linux/#lsv2-series
upvoted 3 times
...
...
epomatti
Most Recent 11 months, 1 week ago
Outdated and wrong. Generation 2 is now supported. It's the Ubuntu OS version that is not supported. https://learn.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview
upvoted 3 times
...
_ajay
11 months, 3 weeks ago
Yes, Azure Disk Encryption is supported on L4s VMs. The L4s series is part of the memory-optimized VM sizes1. As per the Azure Disk Encryption documentation, it is supported on Generation 1 and Generation 2 VMs, and is also available for VMs with premium storage. Azure Disk Encryption is supported on the following types of Azure Virtual Machines (VMs): Generation 1 and Generation 2 VMs123. VMs with premium storage13. However, Azure Disk Encryption is not available on: Basic, A-series VMs13. Virtual machines with less than 2 GB of memory
upvoted 1 times
...
wardy1983
1 year ago
Explanation: VM1: The Tier - The Tier needs to be upgraded to standard. Disk Encryption for Windows and Linux IaaS VMs is in General Availability in all Azure public regions and Azure Government regions for Standard VMs and VMs with Azure Premium Storage. VM2: The type - Need to change the VMtype to any of A, D, DS, G, GS, F, and so on, series IaaS VMs. Not the operating system version: Ubuntu 16.04 is supported. Reference: https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-overview https://docs.micros oft.com/en-us/azure/security/azure-security-disk-encryption-faq#bkmk_LinuxOSSupport
upvoted 3 times
...
flafernan
1 year ago
Outdated question. Encrypt entry-level VMs or VMs created using the classic VM creation method. Windows VMs are available in various sizes. Azure Disk Encryption is supported on Gen 1 and Gen 2 VMs. Azure Disk Encryption is also available for VMs with premium storage. Azure disk encryption is not available on entry-level A-series VMs or virtual machines with less than 2 GB of memory.
upvoted 1 times
...
[Removed]
1 year, 2 months ago
VM2 = operating system Ubutuntu 16.04 is not listed here https://learn.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview
upvoted 3 times
...
majstor86
1 year, 9 months ago
VM1: The tier VM2: The type Old question
upvoted 3 times
...
ben230
3 years ago
2nd Answer is wrong. The docs clearly state G2 VMs support disk encryption. L4s is Gen 2, so it does support disk encryption. https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview#supported-vms-and-operating-systems
upvoted 3 times
...
rsharma007
3 years, 3 months ago
For for the first option, it is definitely tier as Basic A Series VMs are not supported( note that it is Basic A series. Standard A Series supports ADE) For second option, L4s is a storage optimized VM type and hence not in scope of Azure Disk Encryption. HTH
upvoted 2 times
...
SandroAndrade
3 years, 6 months ago
Now ADE is supported for Generation 2 VM: https://docs.microsoft.com/en-us/azure/virtual-machines/generation-2#generation-1-vs-generation-2-capabilities
upvoted 3 times
...
gcpbrig01
3 years, 8 months ago
there is still no clarity as to the compatibility of Ubuntu machine in question. The MS doc clearly says it is compatible. https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview#supported-vms
upvoted 1 times
...
milind8451
3 years, 9 months ago
Given ans seems correct as Azure Disk Encryption is not available on Basic, A-series VMs. Azure Disk Encryption is not available on Generation 2 VMs. L4s is Generation 2 VM size.
upvoted 1 times
...
Sampaiolc
3 years, 10 months ago
"Linux VMs are available in a range of sizes. Azure Disk Encryption is not available on Basic, A-series VMs, or on virtual machines that do not meet these minimum memory requirements" https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview
upvoted 1 times
...
certprep2021
3 years, 10 months ago
the answer is correct
upvoted 1 times
...
Thi
3 years, 10 months ago
VM1: The type, tier VM2: type VM1: Azure Disk Encryption is not possible with the A-series virtual machines/ basic tier. If type A3 and tier standard then answer is type, if type A3, and tier basic then answer is both type and tier. VM2: type because I can’t found type L4s in microsoft documentation.
upvoted 1 times
nicksu
3 years, 6 months ago
L4S is there https://docs.microsoft.com/en-us/azure/virtual-machines/sizes-previous-gen 4 x vCPU & 32Gb RAM, but it is "of previous generation". This could be the key
upvoted 1 times
...
...
B1T3X
3 years, 11 months ago
ADE isn't available for A-size VMs and Basic tier VMs, therefore both "tier" and type" should be correct in the first answer.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...