Exam AZ-801 topic 5 question 37 discussion

Actual exam question from Microsoft's AZ-801

Question #: 37
Topic #: 5

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and uses Azure Disk Encryption.

You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize administrative effort.

Which PowerShell cmdlet should you run?

A. Get-AzKeyVaultKey
B. Get-AzKeyVault
C. Get-AzVMDiskEncryptionStatus
D. Get-AzDiskEncryptionSet

Show Suggested Answer

Suggested Answer: C 🗳️

by NicolaF at Nov. 12, 2024, 6:37 p.m.

Comments

Submit Cancel

Krayzr

4 months, 1 week ago

Selected Answer: C

C. Get-AzVMDiskEncryptionStatus. This cmdlet is specifically designed to retrieve the disk encryption status of an Azure virtual machine. The output of Get-AzVMDiskEncryptionStatus includes details about the encryption, including the URLs and resource IDs of the Key Vaults used to store the encryption keys. This allows you to directly identify the Key Vault associated with VM1's disk encryption with minimal effort. Get-AzVMDiskEncryptionStatus -ResourceGroupName <ResourceGroupName> -VMName <VMName>

upvoted 1 times

...

NicolaF

7 months, 3 weeks ago

C without any doubt

upvoted 2 times

...