Microsoft Azure Administrator Associate AZ-104 Practice Question
Your company mandates that all data stored on Azure virtual machine disks must be encrypted to meet compliance requirements. You need to implement encryption for the disks of existing Windows and Linux VMs. What should you do to fulfill this requirement?
Enable TLS/SSL encryption on the VMs to encrypt data at rest.
Use Azure Disk Encryption to encrypt the VM disks and manage the encryption keys with Azure Key Vault.
Use Azure Backup to back up the VM disks and enable encryption on the backups.
Rely on the default Azure Storage server-side encryption for the VM disks.
Use Azure Disk Encryption integrated with Azure Key Vault to apply guest-OS-level encryption. ADE leverages BitLocker on Windows VMs and DM-Crypt on Linux VMs to encrypt both OS and data volumes, while Key Vault stores and controls the keys and secrets.
Enabling TLS/SSL on the VM protects data in transit only; it does not encrypt the blocks written to the virtual hard disks.
Azure Storage server-side encryption is already enabled on managed disks with platform-managed keys, but relying on it alone does not satisfy a requirement to explicitly encrypt existing VM disks or to manage the keys yourself.
Encrypting Azure Backup data secures the backup copies, not the live disks attached to running VMs.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Azure Disk Encryption, and how does it work?
Open an interactive chat with Bash
What is the role of Azure Key Vault in managing Azure Disk Encryption keys?
Open an interactive chat with Bash
How is Azure Disk Encryption different from Azure Storage Service Encryption?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Deploy and manage Azure compute resources
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .