Microsoft Azure Administrator Associate AZ-104 Practice Question
As an Azure administrator, you need to ensure that all virtual machine disks are encrypted at rest to comply with your company's security policies. The policies state that encryption keys must be under the company's control and not managed by Microsoft. The virtual machines are already running in Azure.
What should you do to meet these requirements?
Enable server-side encryption with platform-managed keys for the storage account.
Use Azure Disk Encryption with keys stored in Azure Key Vault using Microsoft-managed keys.
Use Azure Disk Encryption with keys stored in Azure Key Vault backed by a customer-managed HSM.
Implement BitLocker encryption within each virtual machine and manage the keys locally.