SC-100 Practice Question 4022
Exam: SC-100
Domain: Design security solutions for applications and data
Difficulty: easy
You are designing encryption for Azure Virtual Machine operating system disks. Compliance mandates that the encryption keys must be managed by your security team and stored in Key Vault. What encryption model should you choose?
Answer Options
A
Azure Disk Encryption (ADE) or Server-Side Encryption with Customer-Managed Keys
B
Storing VM disks on unencrypted public file shares
C
Disabling encryption at rest completely
D
Using simple password-protected zip archives for VHD files
Correct Answer
A: Azure Disk Encryption (ADE) or Server-Side Encryption with Customer-Managed Keys
Explanation
Azure Disk Encryption (ADE) or Server-Side Encryption (SSE) with Customer-Managed Keys (CMK) stored in Azure Key Vault satisfies customer-controlled key governance.