Knowledge check

2 minutes

Check your knowledge

When you enable Azure Disk Encryption (ADE) on a Windows virtual machine (VM), what does it use to encrypt the data on your virtual hard disks?

DM-Crypt

BitLocker

Azure Key Vault

To use Azure Key Vault with ADE, what policy do you need to set?

Configure an access policy to permit at least one security principal.

Create an access policy that allows template deployment.

Set the key vault access policy to support disk encryption.

Suppose you create a new VM with a single OS disk and a single data disk. You use the default options when you create the VM. You don't have an Azure Key Vault set up in your subscription. Which option most accurately describes the encryption state of those disks?

Both disks are unencrypted.

The OS disk is encrypted using Storage Service Encryption (SSE). The data disk is unencrypted.

Both disks are encrypted using Storage Service Encryption.

You must answer all questions before checking your work.

Knowledge check

Check your knowledge

Feedback