Answer-first summary for fast verification
Answer: Generate a new key to be used as the KEK., Configure the key vault to support Azure Disk Encryption volume encryption.
To prepare Vault1 for Azure Disk Encryption, you need to: 1. **Create a new key (Option B):** This key will serve as the Key Encryption Key (KEK) necessary for Azure Disk Encryption to function. 2. **Enable Azure Disk Encryption for volume encryption (Option E):** This ensures the key vault is properly configured to work with Azure VMs and their disks for encryption purposes. Without enabling this option, the vault will not be set up for the disk encryption process.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
For VM1, you're setting up Azure Disk Encryption with a KEK using Vault1. Identify the two required preparations for Vault1.
A
Enable Azure Virtual Machines deployment in the key vault.
B
Generate a new key to be used as the KEK.
C
Add a new secret to the key vault.
D
Establish a policy for automatic key rotation.
E
Configure the key vault to support Azure Disk Encryption volume encryption.