AZ-120 · Question #313
You have an Azure subscription. You plan to deploy SAP on Azure. You need to recommend a disk encryption solution for virtual machines. The solution must meet the following requirements: - Support…
The correct answer is D. encryption at host. Encryption at host - End-to-end encryption for your VM data When you enable encryption at host, that encryption starts on the VM host itself, the Azure server that your VM is allocated to. The data for your temporary disk and OS/data disk caches are stored on that VM host…
Question
You have an Azure subscription. You plan to deploy SAP on Azure. You need to recommend a disk encryption solution for virtual machines. The solution must meet the following requirements:
- Support the encryption of operating system, data, and temp disks.
- Support the encryption of data at rest and data in transit.
- Minimize CPU overhead on the virtual machines.
What should you include in the recommendation?
Options
- AAzure Disk Encryption
- Bserver-side encryption (SSE)
- CConfidential disk encryption
- Dencryption at host
How the community answered
(55 responses)- A4% (2)
- B13% (7)
- C7% (4)
- D76% (42)
Explanation
Encryption at host - End-to-end encryption for your VM data When you enable encryption at host, that encryption starts on the VM host itself, the Azure server that your VM is allocated to. The data for your temporary disk and OS/data disk caches are stored on that VM host. After enabling encryption at host, all this data is encrypted at rest and flows encrypted to the Storage service, where it's persisted. Essentially, encryption at host encrypts your data from end-to-end. Encryption at host doesn't use your VM's CPU and doesn't impact your VM's performance.
Topics
Community Discussion
No community discussion yet for this question.