Exam AZ-301 topic 17 question 4 discussion

Actual exam question from Microsoft's AZ-301

Question #: 4
Topic #: 17

You have an Azure subscription that contains 100 virtual machines.
You plan to design a data protection strategy to encrypt the virtual disks.
You need to recommend a solution to encrypt the disks by using Azure Disk Encryption. The solution must provide the ability to encrypt operating system disks and data disks.
What should you include in the recommendation?

A. a passphrase
B. a certificate
C. a key
D. a secret

Show Suggested Answer

Suggested Answer: C 🗳️
For enhanced virtual machine (VM) security and compliance, virtual disks in Azure can be encrypted. Disks are encrypted by using cryptographic keys that are secured in an Azure Key Vault. You control these cryptographic keys and can audit their use.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/encrypt-disks

by ablab at Aug. 11, 2020, 8:55 p.m.

Comments

Submit Cancel

sanketshah

4 years, 5 months ago

given answer is correct.

upvoted 2 times

...

ablab

4 years, 10 months ago

Ans is Correct Azure Disk Encryption helps protect and safeguard your data to meet your organizational security and compliance commitments. It uses the Bitlocker feature of Windows to provide volume encryption for the OS and data disks of Azure virtual machines (VMs), and is integrated with Azure Key Vault to help you control and manage the disk encryption keys and secrets.

upvoted 4 times

...