az-104 Practice Question 1726
Exam: az-104
Domain: Deploy and manage Azure compute resources
Topic: Create and configure virtual machines
Difficulty: medium
During a recent security audit, it was discovered that the Contoso Ltd's production database server is not encrypted. The company wants to ensure data protection by enabling disk encryption. Which method should you use to encrypt the virtual machine’s disks?
Answer Options
A
Use unmanaged disks and manually encrypt the disks using a third-party tool.
B
Use Managed Disks with BitLocker encryption.
C
Use unmanaged disks and enable BitLocker on the virtual machine.
D
Use managed disks without any encryption.
Correct Answer
B: Use Managed Disks with BitLocker encryption.
Explanation
Using Managed Disks with BitLocker encryption is the recommended approach for securing virtual machine disks in Azure. Option B is correct because Managed Disks with BitLocker encryption provides a secure and managed solution for disk encryption. Option A is incorrect as it does not mention encryption at all. Option C is incorrect as it refers to unmanaged disks, which do not provide the same level of security and management features. Option D is incorrect as it suggests using unmanaged disks, which are less secure and require manual management.