Practice Test 1 | AZ 104 | Dumps | Mock Test
Please select all true statements that apply to the use of Azure Disk Encryption (ADE) for Azure VM disk protection.
Select all that apply.
B. ADE supports the encryption of Basic tier VM’s.
C. ADE encrypted VM must be backed up to the Recovery Service Vault.
D. ADE uses DM-Crypt for Windows VM-controlled disks.
E. ADE is integrated with Azure Key Vault.
F.
ADE can use Azure Key Vault and Azure Recovery Service Vault from different Azure regions.
G.
ADE uses DM-Crypt for Linux based VMs.
H.
ADE encrypts all data at rest and in transit.
A, C, E, and G
Option A is correct because Azure Disk Encryption uses BitLocker feature of Windows OS to encrypt VM-controlled Virtual Hard Disks (VHD).
Option C is correct because Azure Disk Encryption requires VM to be backed up to Recovery Service Vault.
Option E is correct because Azure Disk Encryption is integrated with Key Vault. Azure users can store ADE encryption keys securely in Azure Key Vault.
Option G is correct because Azure Disk Encryption uses the DM-Crypt system in Linux to encrypt VM-controlled Virtual Hard Disks (VHD).
Option B is incorrect because ADE does not support the encryption of Basic tier VM’s.
Option D is incorrect because DM-Crypt is a disk encryption system for Linux kernel but not for Windows OS.
Option F is incorrect because ADE can use Azure Key Vault and Azure Recovery Service Vault only if they are in the same Azure region to prevent secrets crossing region boundaries.
Option H is incorrect because ADE encrypts only data at rest.
For more information about the Azure Disk Encryption, please visit the below URLs-
https://docs.microsoft.com/en-us/azure/security/fundamentals/azure-disk-encryption-vms-vmss
https://docs.microsoft.com/en-us/learn/modules/secure-your-azure-virtual-machine-disks/2-encryption-options-for-protecting-windows-and-linux-vms
Comments are closed, but trackbacks and pingbacks are open.