Exam-Answer

Home / Microsoft / AZ-303 / Question 25

Prev Question
Next Question

Question 25

Your company is researching ways to improve data security for Windows and Linux Infrastructure-as-a-Service (IaaS) virtual machines (VM)s. You need to determine if Azure Disk Encryption can meet the company's requirements.

Choose all that apply:

Answers



A B C

Advertisement

Explanation

Azure Disk Encryption is not supported for Basic tier VMs. It is supported for Standard and Premium tier VMs. Azure Disk Encryption supports Windows Server 2008 and later, and a subset of Azure Linux images. Custom Linux images are not supported.

You must encrypt the boot volume before you can encrypt any data volumes on a Windows VM. Azure Disk Encryption does not let you encrypt a data volume unless you first encrypt the OS volume. This is different for Linux VMs, which let you encrypt data without first encrypting the OS volume.

You cannot use an on-premises key management service to safeguard encryption keys. You are required to use Azure Key Vault. Azure Key Vault is a prerequisite for implementing Azure Disk Encryption.

References

Comments

Load more
Prev Question
Next Question