Microsoft
AZ-104 · Question #666
You have an Azure virtual machine named VM1 and an Azure key vault named Vault1. On VM1, you plan to configure Azure Disk Encryption to use a key encryption key (KEK). You need to prepare Vault1 for A
Sign in or unlock AZ-104 to reveal the answer and full explanation for question #666. The question stem and answer options stay visible for context.
Submitted by naveen.iyer· Mar 4, 2026Deploy and manage Azure compute resources
Question
You have an Azure virtual machine named VM1 and an Azure key vault named Vault1. On VM1, you plan to configure Azure Disk Encryption to use a key encryption key (KEK). You need to prepare Vault1 for Azure Disk Encryption. Which two actions should you perform on Vault1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- ASelect Azure Virtual machines for deployment.
- BCreate a new key.
- CCreate a new secret.
- DConfigure a key rotation policy.
- ESelect Azure Disk Encryption for volume encryption.
Unlock AZ-104 to see the answer
You've previewed enough free AZ-104 questions. Unlock AZ-104 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.