Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 5 question 40 discussion

Actual exam question from Microsoft's AZ-500

Question #: 40
Topic #: 5

DRAG DROP -
You have an Azure Storage account named storage1 and an Azure virtual machine named VM1. VM1 has a premium SSD managed disk.
You need to enable Azure Disk Encryption for VM1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange then in the correct order.
Select and Place:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault

by JerryGolais at April 20, 2021, 9:58 p.m.

Comments

Submit Cancel

WhalerTom

Highly Voted 3 years, 6 months ago

Correct answer. In exam Dec 21. 40 questions, 1 case study, no labs.

upvoted 11 times

DoctorCOmputer

3 years, 5 months ago

Thanks

upvoted 1 times

...

zellck

Highly Voted 2 years, 2 months ago

1. Create an Azure key vault. 2. Set the Key Vault access policy to Enable access to Azure Disk Encryption for volume encryption. 3. Run the Set-AzVMDiskEncryptionExtension cmdlet. https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#create-a-key-vault https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#azure-portal-1 Under "Enable Access to", select the box labeled Azure Disk Encryption for volume encryption. https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#azure-powershell-3 In either case, you will supply the ID of your KEK key Vault and the URL of your KEK to the Azure PowerShell Set-AzVMDiskEncryptionExtension -KeyEncryptionKeyVaultId and -KeyEncryptionKeyUrl parameters.

upvoted 6 times

zellck

2 years, 1 month ago

Gotten this in May 2023 exam.

upvoted 4 times

...

saira23

Most Recent 11 months, 2 weeks ago

In Exam20/07/2024

upvoted 1 times

...

scottyboy23

11 months, 3 weeks ago

on exam 20240715 answer correct

upvoted 1 times

...

majstor86

2 years, 4 months ago

1. Create an Azure key vault 2. Set the Key Vault access policy to Enable access to Azure Disk Encryption for volume encryption. 3. Run the Set-AzVMDiskEncryptionExtension cmdlet.

upvoted 5 times

saturation97

2 years, 2 months ago

So basically you're reiterating the exact answer...thanks.

upvoted 2 times

LonDonMagic

2 years, 2 months ago

Yes this douche bag has been doing this on every single question, pretty annoying.

upvoted 1 times

...

Diodx

2 years, 7 months ago

in exam, 25 november 2022 lots of new questions. 40 questions,1 study case (6 questions) no labs

upvoted 2 times

...

lahl

2 years, 8 months ago

on exam yesterday October 31st. Correct answer. 40 questions, 1 case study with 6 questions, no labs.

upvoted 1 times

...

MoFami

3 years ago

On exam 01 july 2022

upvoted 4 times

...

Eltooth

3 years, 3 months ago

No longer in exam. https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE3VC70

upvoted 1 times

Sisyphus

2 years, 11 months ago

back in exam. See the comment above

upvoted 3 times

...

wooyourdaddy

3 years, 6 months ago

1. Create an Azure key vault 2. Set the Key Vault access policy to Enable access to Azure Disk Encryption for volume encryption. 3. Run the Set-AzVMDiskEncryptionExtension cmdlet. 1. Creating a resource group, if needed. 2. Creating a key vault. 3. Setting key vault advanced access policies. (***NOTE***: The Set-AzVMDiskEncryptionExtension cmdlet enables encryption on a running infrastructure as a service (IaaS) virtual machine in Azure. It enables encryption by installing the disk encryption extension on the virtual machine.)

upvoted 3 times

...

kam117

3 years, 9 months ago

## Exam Question - 24 Sept 2021 ##

upvoted 1 times

...

SecurityAnalyst

3 years, 10 months ago

# IN EXAM - 31/8/2021

upvoted 3 times

...

Sandomj55

3 years, 11 months ago

In Exam 8/4/2021

upvoted 4 times

...

JerryGolais

4 years, 2 months ago

Does it matter if you run the command before you set the access policy?

upvoted 2 times

ZakS

4 years, 1 month ago

I think for exams, it is better to take the order that will work 100% of the time, i.e. if we run the command first, then there is a period of time (let's say a few seconds) till you make config changes to the Key Vault settings when the command you have executed will fail, i.e. the VM cannot use the KV for disk encryption. If you do the order specified, then the KV is ready for disk encryption and the VM can use it as soon as the command is run.

upvoted 8 times

...