DRAG DROP -
You have an Azure Storage account named storage1 and an Azure virtual machine named VM1. VM1 has a premium SSD managed disk.
You need to enable Azure Disk Encryption for VM1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange then in the correct order.
Select and Place:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault
Correct answer. In exam Dec 21. 40 questions, 1 case study, no labs.
Thanks
1. Create an Azure key vault. 2. Set the Key Vault access policy to Enable access to Azure Disk Encryption for volume encryption. 3. Run the Set-AzVMDiskEncryptionExtension cmdlet. https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#create-a-key-vault https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#azure-portal-1 Under "Enable Access to", select the box labeled Azure Disk Encryption for volume encryption. https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#azure-powershell-3 In either case, you will supply the ID of your KEK key Vault and the URL of your KEK to the Azure PowerShell Set-AzVMDiskEncryptionExtension -KeyEncryptionKeyVaultId and -KeyEncryptionKeyUrl parameters.
Gotten this in May 2023 exam.
1. Create an Azure key vault 2. Set the Key Vault access policy to Enable access to Azure Disk Encryption for volume encryption. 3. Run the Set-AzVMDiskEncryptionExtension cmdlet.
So basically you're reiterating the exact answer...thanks.
Yes this douche bag has been doing this on every single question, pretty annoying.
In Exam 8/4/2021
On exam 01 july 2022
# IN EXAM - 31/8/2021
1. Create an Azure key vault 2. Set the Key Vault access policy to Enable access to Azure Disk Encryption for volume encryption. 3. Run the Set-AzVMDiskEncryptionExtension cmdlet. 1. Creating a resource group, if needed. 2. Creating a key vault. 3. Setting key vault advanced access policies. (***NOTE***: The Set-AzVMDiskEncryptionExtension cmdlet enables encryption on a running infrastructure as a service (IaaS) virtual machine in Azure. It enables encryption by installing the disk encryption extension on the virtual machine.)
Does it matter if you run the command before you set the access policy?
I think for exams, it is better to take the order that will work 100% of the time, i.e. if we run the command first, then there is a period of time (let's say a few seconds) till you make config changes to the Key Vault settings when the command you have executed will fail, i.e. the VM cannot use the KV for disk encryption. If you do the order specified, then the KV is ready for disk encryption and the VM can use it as soon as the command is run.
in exam, 25 november 2022 lots of new questions. 40 questions,1 study case (6 questions) no labs
## Exam Question - 24 Sept 2021 ##
No longer in exam. https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE3VC70
back in exam. See the comment above
on exam yesterday October 31st. Correct answer. 40 questions, 1 case study with 6 questions, no labs.
on exam 20240715 answer correct
In Exam20/07/2024