To protect data-at-rest for a managed disk using your own encryption keys (BYOK), which service must be used to store the keys?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Azure Key Vault

Azure Disk Encryption and Disk Encryption Sets integrate with Key Vault for key management....

๐Ÿ“‹Part of Microsoft Certified: Azure Administrator Associate (AZ-104) ยท Azure Certification Practice
Real Exam ScenarioAzure Managed Disks

To protect data-at-rest for a managed disk using your own encryption keys (BYOK), which service must be used to store the keys?

โœ“ Correct Answer & ExplanationAzure Managed Disks

Correct Answer

Azure Key Vault

Why This Answer Is Correct

Azure Disk Encryption and Disk Encryption Sets integrate with Key Vault for key management.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Azure Managed Disks โ€” a core concept tested in Microsoft Certified: Azure Administrator Associate (AZ-104). Understanding Azure Managed Disks is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.