Knowledge check

3 minutes

Which disk encryption approach is recommended for new Azure virtual machines and provides end-to-end encryption that covers temp disks, disk caches, and data flows to storage?

Azure Disk Encryption (ADE) using BitLocker or DM-Crypt

Encryption at host

Server-side encryption with platform-managed keys

You need to use your organization's own keys to encrypt Azure VM managed disks, with the keys managed in Azure Key Vault. What Azure resource must you create to associate the customer-managed key with the VM's disks?

Key Vault access policy configured for the VM's managed identity

Disk Encryption Set

Key encryption key (KEK) in Azure Key Vault

A confidential VM uses which mechanism to bind disk encryption keys, ensuring that protected disk content is accessible only to that specific VM?

A Disk Encryption Set linked to the VM's managed identity

Azure Key Vault with private endpoint and firewall restriction

The VM's virtual Trusted Platform Module (vTPM)

You must answer all questions before checking your work.

Feedback

Was this page helpful?

Knowledge check

Check your knowledge

Feedback