Question 215 of 236 from exam AZ-500: Microsoft Azure Security Technologies
Question
You have an Azure subscription named Sub1 that contains the Azure key vaults shown in the following table:
In Sub1, you create a virtual machine that has the following configurations:
-> Name: VM1
-> Size: DS2v2
-> Resource group: RG1
-> Region: West Europe
-> Operating system: Windows Server 2016
You plan to enable Azure Disk Encryption on VM1.
In which key vaults can you store the encryption key for VM1?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.A
In order to make sure the encryption secrets don't cross regional boundaries, Azure Disk Encryption needs the Key Vault and the VMs to be co-located in the same region. Create and use a Key Vault that is in the same region as the VM to be encrypted.
https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-prerequisites