You created a virtual machine named VM1 (DS2v2, RG1, West Europe, Windows Server 2016). You plan to enable Azure Disk Encryption on VM1. In which of the listed key vaults can you store the encryption key for VM1?
Choose an answer
Tap an option to check your answer.
Correct answer: Vault1 or Vault3 only.
Why this is the answer
Azure Disk Encryption requires the key vault to be in the same Azure region as the virtual machine. VM1 is in West Europe. Vault1 is in West Europe, and Vault3 is also in West Europe, making them valid options. Vault2 is in East US, and Vault4 is in South Central US, so they cannot be used to store the encryption key for VM1. Additionally, the key vault must have the EnabledForDiskEncryption property set to true.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed