- 6 views
Exam
Answer needs confirmation
Question
You have an Azure subscription that contains an Azure key vault named Vault1.
You plan to deploy a virtual machine named VM1 that will run Windows Server.
You need to enable encryption at host for VM1. The solution must use customer-managed keys.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Proposed answer
Suggested answer
alzdashti
Highly Voted 1 year, 2 months ago
The answer is wrong. The correct answer is: 1- Create a disk encryption set and generate RSA keys. 2- Grant Vault1 the managed identity permission for the disk encryption ser. 3- Create VM1 and associate the disks of the virtual machine with the disk encryption https://learn.microsoft.com/en-us/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell
upvoted 26 times
Disguster
1 year, 2 months ago
Agree, and provided link supports it.
upvoted 5 times
Vallion
Most Recent 2 months, 3 weeks ago
1. Set up your Azure Key Vault 2. Add an Azure RBAC role (for access to the vault) 3. Set up your disk encryption set 4. Deploy a VM (On the Disks pane, choose Host Based encryption)