Implement Secure Cloud Solutions

Question 1

What key type does Azure support for disk encryption?

Answer 1

RSA

Question 2

What two Azure CLI commands should you use for creating a key vault and adding disk encryption?

Answer 2

az keyvault create {..options}
az keyvault update {..options} –enabled-for-disk-encryption “true”

Single command
az keyvault create {..options} –enabled-for-disk-encryption

Question 3

What AzureCLI command should you use to create a KEK (key encryption key)?

Answer 3

az keyvault key create {..options}

Question 4

What Azure CLI command would you use to add a KEK to the keyvault for a VM called “myLinuxVM”?
Assume key is called “myKEK”, resource group “myRG”, vault “myKeyVault” and

Answer 4

az vm encryption enable -g “myRG” –name “myLinuxVM” –disk-encryption-keyvault “myKeyVault” –key-encryption-key “myKEK”