You have an Azure subscription with several Key Vaults and you create a Windows Server VM (VM1) in resource group RG1 in East US. To enable Azure Disk Encryption for VM1, which key vault from the choices can store the encryption key for VM1?
Choose an answer
Tap an option to check your answer.
Correct answer: Vault1 or Vault3 only.
Why this is the answer
Azure Disk Encryption requires the Key Vault to be in the same Azure region and subscription as the virtual machine. Vault1 is in East US and the same subscription as VM1, making it a valid choice. Vault3 is also in East US and the same subscription, so it's also valid. Vault2 is in West US, a different region, making it unsuitable. Vault4 is in a different subscription, which also makes it unsuitable for storing VM1's encryption key.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed