Valid AZ-104 Dumps shared by ExamDiscuss.com for Helping Passing AZ-104 Exam! ExamDiscuss.com now offer the newest AZ-104 exam dumps, the ExamDiscuss.com AZ-104 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com AZ-104 dumps with Test Engine here:
You have an Azure virtual machine named VM1 and an Azure key vault named Vault1. On VM1, you plan to configure Azure Disk Encryption to use a key encryption key (KEK) You need to prepare Vault! for Azure Disk Encryption. Which two actions should you perform on Vault1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Correct Answer: A,C
To prepare Vault1 for Azure Disk Encryption, you need to perform the following actions on Vault1: Create a new key. A key encryption key (KEK) is an encryption key that is used to encrypt the encryption secrets before they are stored in the key vault. You can create a new KEK by using the Azure CLI, the Azure PowerShell, or the Azure portal1. You can also import an existing KEK from another source, such as a hardware security module (HSM)2. The KEK must be a 2048-bit RSA key or a 256-bit AES key3. Select Azure Disk Encryption for volume encryption. This is an advanced access policy setting that enables Azure Disk Encryption to access the keys and secrets in the key vault. You can select this setting by using the Azure CLI, the Azure PowerShell, or the Azure portal4. You must also enable access to Microsoft Trusted Services if you have enabled the firewall on the key vault.