Implement Secure Cloud Solutions Flashcards

1
Q

What key type does Azure support for disk encryption?

A

RSA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What two Azure CLI commands should you use for creating a key vault and adding disk encryption?

A

az keyvault create {..options}
az keyvault update {..options} –enabled-for-disk-encryption “true”

Single command
az keyvault create {..options} –enabled-for-disk-encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What AzureCLI command should you use to create a KEK (key encryption key)?

A

az keyvault key create {..options}

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What Azure CLI command would you use to add a KEK to the keyvault for a VM called “myLinuxVM”?
Assume key is called “myKEK”, resource group “myRG”, vault “myKeyVault” and

A

az vm encryption enable -g “myRG” –name “myLinuxVM” –disk-encryption-keyvault “myKeyVault” –key-encryption-key “myKEK”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly