You plan to configure Azure Disk Encryption for VM4.
Which key vault can you use to store the encryption key?
You plan to configure Azure Disk Encryption for VM4.
Which key vault can you use to store the encryption key?
To configure Azure Disk Encryption for a VM, the key vault used to store the encryption key must be in the same geographical region and subscription as the VM. Since VM4 is located in West US, the only suitable key vault is KeyVault1, which is also located in West US. Therefore, KeyVault1 is the correct key vault to use for storing the encryption key for VM4.
In Exam , 31st Jan 23 54 Question 1 Case Study No Simulation
A is correct answer.
This one is correct, key vault must be in the same region.
A. KeyVault1
To ensure that encryption secrets don't cross regional boundaries, you must create and use a key vault that's in the same region and tenant as the VMs to be encrypted.
VM4 => VNET3/Subnet1 (Region = West US) VNET3 peering with VNET1,VNET2 Disc Encryption requierement is "same region rule" Keyvault1 => Region West US So, VM4 can do disc encryption with KeyVault1 (because same region and peering VNET1)
Provided answer is correct.
Is there any point for Pricing Tier? Looks like Standard Key vaults do not support Disk Encryption.
VM and Key vault must be in same region. Thats the point here only. So provided answer is correct.
Answer: A Explanation: The key vault needs to be in the same subscription and same region as the VM. VM4 is in West US. KeyVault1 is the only key vault in the same region as the VM. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault
To support the answer. https://www.examtopics.com/exams/microsoft/az-500/view/47/ VM4 is an UBUNTU Srv located in the West US Sub1 The keyVault1: Is located in West US same as VM4 / Ubuntu Srv. Encryption key storage requirements Azure Disk Encryption requires an Azure Key Vault to control and manage disk encryption keys and secrets. Your key vault and VMs must reside in the same Azure region and subscription. Answer = A