SIMULATION You plan to use Azure Disk Encryption for several virtual machine disks. You need to ensure that Azure Disk Encryption can retrieve secrets from the KeyVault11641655 Azure key vault. To…

Submitted by kev92· Mar 6, 2026Implement and manage data protection and encryption - specifically configuring Azure Key Vault access policies to support Azure Disk Encryption for IaaS virtual machine disk security (AZ-104: Secure Azure resources / AZ-500: Configure and manage Key Vault).

Question

SIMULATION You plan to use Azure Disk Encryption for several virtual machine disks. You need to ensure that Azure Disk Encryption can retrieve secrets from the KeyVault11641655 Azure key vault. To complete this task, sign in to the Azure portal and modify the Azure resources. Answer: 1. In the Azure portal, type Key Vaults in the search box, select Key Vaults from the search results then select KeyVault11641655. Alternatively, browse to Key Vaults in the left navigation pane. 2. In the Key Vault properties, scroll down to the Settings section and select Access Policies. 3. Select the Azure Disk Encryption for volume encryption 4. Click Save to save the changes.

Exhibit

Explanation

To enable Azure Disk Encryption to retrieve secrets from a Key Vault, you must configure the Key Vault's Access Policies to include the 'Azure Disk Encryption for volume encryption' option. This grants the Azure Disk Encryption service principal the necessary permissions (Get, Wrap Key, Unwrap Key) on the Key Vault. Without this access policy enabled, Azure Disk Encryption cannot read encryption keys or secrets stored in the Key Vault, causing disk encryption operations to fail.

Topics

#Azure Key Vault#Azure Disk Encryption#Access Policies#Data Security

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice