exam questions

Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 5 question 40 discussion

Actual exam question from Microsoft's AZ-500
Question #: 40
Topic #: 5
[All AZ-500 Questions]

DRAG DROP -
You have an Azure Storage account named storage1 and an Azure virtual machine named VM1. VM1 has a premium SSD managed disk.
You need to enable Azure Disk Encryption for VM1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange then in the correct order.
Select and Place:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
WhalerTom
Highly Voted 3 years, 4 months ago
Correct answer. In exam Dec 21. 40 questions, 1 case study, no labs.
upvoted 11 times
DoctorCOmputer
3 years, 3 months ago
Thanks
upvoted 1 times
...
...
zellck
Highly Voted 2 years ago
1. Create an Azure key vault. 2. Set the Key Vault access policy to Enable access to Azure Disk Encryption for volume encryption. 3. Run the Set-AzVMDiskEncryptionExtension cmdlet. https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#create-a-key-vault https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#azure-portal-1 Under "Enable Access to", select the box labeled Azure Disk Encryption for volume encryption. https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#azure-powershell-3 In either case, you will supply the ID of your KEK key Vault and the URL of your KEK to the Azure PowerShell Set-AzVMDiskEncryptionExtension -KeyEncryptionKeyVaultId and -KeyEncryptionKeyUrl parameters.
upvoted 6 times
zellck
1 year, 12 months ago
Gotten this in May 2023 exam.
upvoted 4 times
...
...
saira23
Most Recent 9 months, 3 weeks ago
In Exam20/07/2024
upvoted 1 times
...
scottyboy23
9 months, 3 weeks ago
on exam 20240715 answer correct
upvoted 1 times
...
majstor86
2 years, 2 months ago
1. Create an Azure key vault 2. Set the Key Vault access policy to Enable access to Azure Disk Encryption for volume encryption. 3. Run the Set-AzVMDiskEncryptionExtension cmdlet.
upvoted 5 times
saturation97
2 years, 1 month ago
So basically you're reiterating the exact answer...thanks.
upvoted 2 times
LonDonMagic
2 years ago
Yes this douche bag has been doing this on every single question, pretty annoying.
upvoted 1 times
...
...
...
Diodx
2 years, 5 months ago
in exam, 25 november 2022 lots of new questions. 40 questions,1 study case (6 questions) no labs
upvoted 2 times
...
lahl
2 years, 6 months ago
on exam yesterday October 31st. Correct answer. 40 questions, 1 case study with 6 questions, no labs.
upvoted 1 times
...
MoFami
2 years, 10 months ago
On exam 01 july 2022
upvoted 4 times
...
Eltooth
3 years, 1 month ago
No longer in exam. https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE3VC70
upvoted 1 times
Sisyphus
2 years, 9 months ago
back in exam. See the comment above
upvoted 3 times
...
...
wooyourdaddy
3 years, 4 months ago
1. Create an Azure key vault 2. Set the Key Vault access policy to Enable access to Azure Disk Encryption for volume encryption. 3. Run the Set-AzVMDiskEncryptionExtension cmdlet. 1. Creating a resource group, if needed. 2. Creating a key vault. 3. Setting key vault advanced access policies. (***NOTE***: The Set-AzVMDiskEncryptionExtension cmdlet enables encryption on a running infrastructure as a service (IaaS) virtual machine in Azure. It enables encryption by installing the disk encryption extension on the virtual machine.)
upvoted 3 times
...
kam117
3 years, 7 months ago
## Exam Question - 24 Sept 2021 ##
upvoted 1 times
...
SecurityAnalyst
3 years, 8 months ago
# IN EXAM - 31/8/2021
upvoted 3 times
...
Sandomj55
3 years, 9 months ago
In Exam 8/4/2021
upvoted 4 times
...
JerryGolais
4 years ago
Does it matter if you run the command before you set the access policy?
upvoted 2 times
ZakS
3 years, 11 months ago
I think for exams, it is better to take the order that will work 100% of the time, i.e. if we run the command first, then there is a period of time (let's say a few seconds) till you make config changes to the Key Vault settings when the command you have executed will fail, i.e. the VM cannot use the KV for disk encryption. If you do the order specified, then the KV is ready for disk encryption and the VM can use it as soon as the command is run.
upvoted 8 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago