Implement Secure Cloud Solutions Flashcards
What key type does Azure support for disk encryption?
RSA
What two Azure CLI commands should you use for creating a key vault and adding disk encryption?
az keyvault create {..options}
az keyvault update {..options} –enabled-for-disk-encryption “true”
Single command
az keyvault create {..options} –enabled-for-disk-encryption
What AzureCLI command should you use to create a KEK (key encryption key)?
az keyvault key create {..options}
What Azure CLI command would you use to add a KEK to the keyvault for a VM called “myLinuxVM”?
Assume key is called “myKEK”, resource group “myRG”, vault “myKeyVault” and
az vm encryption enable -g “myRG” –name “myLinuxVM” –disk-encryption-keyvault “myKeyVault” –key-encryption-key “myKEK”