Exam AZ-303 topic 6 question 45 discussion

Actual exam question from Microsoft's AZ-303

Question #: 45
Topic #: 6

HOTSPOT -
Your company runs several Windows and Linux virtual machines (VMs).
You must design a solution that implements data privacy, compliance, and data sovereignty for all storage uses in Azure. You plan to secure all Azure storage accounts by using Role-Based Access Controls (RBAC) and Azure Active Directory (Azure AD).
You need to secure the data used by the VMs.
Which solution should you use? To answer, select the appropriate solutions in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

References:
https://docs.microsoft.com/en-us/azure/security/security-storage-overview

by Yiannisthe7th at July 2, 2021, 5:50 p.m.

Comments

Submit Cancel

syu31svc

Highly Voted 3 years, 9 months ago

Correct answers given

upvoted 8 times

...

tita_tovenaar

Most Recent 3 years, 10 months ago

Correct Azure storage service encryption is mainly aimed at encrypting data on the move, entering Microsoft or leaving (second question) Disk encryption is mainly data at rest (first question) SAS tokens are relevant too, but mainly used to grant access to data points (not asked here). NSG and AD are security measures at level of network and identity, not data.

upvoted 3 times

jyotish

3 years, 8 months ago

Disk encryption is as it says for volume encryption, not data at rest. SSE(Storage Service Encryption or Server Side Encryption) is the encryption of data at rest. Please refer here https://docs.microsoft.com/en-us/azure/storage/common/storage-service-encryption AND https://docs.microsoft.com/en-us/azure/virtual-machines/disk-encryption-overview

upvoted 2 times

...

rdemontis

3 years, 10 months ago

Correct

upvoted 1 times

...

Yiannisthe7th

3 years, 11 months ago

Given answer is correct

upvoted 4 times

...