You have an azure virtual machine named VM1. You plan to encrypt VM1 by using Azure Disk Encryption. Which Azure resource must you create first?

The correct answer is D. An Azure Key Vault. Azure Disk Encryption requires an Azure Key Vault to control and manage disk encryption keys https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview

Submitted by tyler.j· Mar 5, 2026Describe Azure architecture and services

Question

You have an azure virtual machine named VM1. You plan to encrypt VM1 by using Azure Disk Encryption. Which Azure resource must you create first?

Options

AAn Azure Storage account
BAn Azure Information Protection policy
CAn Encryption Key
DAn Azure Key Vault

How the community answered

(32 responses)

A
3% (1)
B
6% (2)
D
91% (29)

Explanation

Azure Disk Encryption requires an Azure Key Vault to control and manage disk encryption keys https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview

Community Discussion

No community discussion yet for this question.

Full AZ-900 Practice