exam questions

Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 5 question 26 discussion

Actual exam question from Microsoft's AZ-500
Question #: 26
Topic #: 5
[All AZ-500 Questions]

DRAG DROP -
You have an Azure subscription named Sub1. Sub1 contains an Azure virtual machine named VM1 that runs Windows Server 2016.
You need to encrypt VM1 disks by using Azure Disk Encryption.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/encrypt-disks

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
badaboom
Highly Voted 3 years, 6 months ago
Seems correct !
upvoted 21 times
...
SecurityAnalyst
Highly Voted 3 years, 1 month ago
# IN EXAM - 31/8/2021
upvoted 7 times
...
JaridB
Most Recent 5 months, 1 week ago
Provided solution is correct
upvoted 1 times
...
brooklyn510
9 months, 1 week ago
On exam 1/2/24
upvoted 4 times
...
ITFranz
11 months, 2 weeks ago
Azure Disk Encryption uses Azure Key Vault to control and manage disk encryption keys and secrets Steps: Creating a resource group, if needed. Creating a key vault. Setting key vault advanced access policies. Use the Azure PowerShell Add-AzKeyVaultKey cmdlet to generate a new KEK and store it in your key vault. Answers are correct.
upvoted 2 times
...
zellck
1 year, 5 months ago
1. Create an Azure key vault 2. Configure access policies for the Azure key vault. 3. Run Set-AzVMDiskEncryptionExtension https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#create-a-key-vault https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#azure-portal-1 Under "Enable Access to", select the box labeled Azure Disk Encryption for volume encryption. https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#azure-powershell-3 In either case, you will supply the ID of your KEK key Vault and the URL of your KEK to the Azure PowerShell Set-AzVMDiskEncryptionExtension -KeyEncryptionKeyVaultId and -KeyEncryptionKeyUrl parameters.
upvoted 4 times
...
majstor86
1 year, 7 months ago
1. Create an Azure key vault 2. Configure access policies for the Azure key vault. 3. Run Set-AzVMDiskEncryptionExtension
upvoted 6 times
...
Eltooth
2 years, 6 months ago
No longer in exam. https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE3VC70
upvoted 1 times
danlo
1 year, 9 months ago
Why not? Configure encryption at rest & Configure encryption in transit is in the exam
upvoted 1 times
...
...
wooyourdaddy
2 years, 10 months ago
Correct answer: See * Question 08 - Topic 05: 1. Create an Azure key vault 2. Configure access policies for the Azure key vault. 3. Run Set-AzVMDiskEncryptionExtension
upvoted 1 times
...
choskar90
3 years, 2 months ago
it's fine
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago