Home › Azure AZ-500 › cloudcomputing › az500compstoragedb › Which Azure compute encryption feature encrypts …
Which Azure compute encryption feature encrypts OS + data disks of an Azure VM at rest with platform-managed or customer-managed keys?
AAzure DNS
BAzure Cache for Redis
CAzure Disk Encryption (ADE) — using BitLocker on Windows or DM-Crypt on Linux, backed by Key Vault
DPlain unencrypted disks
Answer & Solution
Correct answer: C. Azure Disk Encryption (ADE) — using BitLocker on Windows or DM-Crypt on Linux, backed by Key Vault
ADE encrypts VM disks at the OS level using Key Vault keys (per AZ-500 §3 disk encryption). The other options aren't disk encryption.
Related questions
Which Azure Storage feature should a security engineer enable to require all reads/writes Which Azure VM security feature lets a security engineer require all data passing between Which Azure SQL feature lets a security engineer enable Microsoft Entra ID-based DB loginsWhich Azure SQL feature should a security engineer enable to obscure sensitive column valuWhich Azure SQL Database feature should a security engineer recommend to encrypt sensitiveWhich Azure SQL Database feature should a security engineer enable to encrypt data at restWhich Azure storage feature lets a security engineer generate a TIME-LIMITED, scope-bound Which Azure storage authentication option should a security engineer prefer over shared-ke