AZ-801 · Question #121
You are an administrator at Contoso and you need to create a new VM with a single OS disk and a single data disk. While creating the VM, you use the default options. You don't have a key vault set up
The correct answer is B. Both of the disks are encrypted using server-side encryption.. By default, all Azure Managed Disks, including OS and data disks, are encrypted at rest using server-side encryption with platform-managed keys.
Question
Options
- ABoth of the disks are unencrypted.
- BBoth of the disks are encrypted using server-side encryption.
- CThe operating system disk is encrypted using server-side encryption. The data disk is unencrypted.
- DThe Data disk is encrypted using server-side encryption. The operating system disk is unencrypted.
How the community answered
(33 responses)- A3% (1)
- B94% (31)
- C3% (1)
Why each option
By default, all Azure Managed Disks, including OS and data disks, are encrypted at rest using server-side encryption with platform-managed keys.
Server-side encryption is automatically enabled for all new Azure Managed Disks, providing encryption at rest without requiring any user configuration or a Key Vault for platform-managed keys.
Both OS and data disks utilize server-side encryption by default, not just the data disk.
Concept tested: Azure Managed Disk default encryption (SSE)
Source: https://learn.microsoft.com/en-us/azure/virtual-machines/managed-disks-overview#disk-encryption
Topics
Community Discussion
No community discussion yet for this question.