Correct Answer: Azure Key Vault + Disk Encryption Set
Disk Encryption Sets act as a container for your keys and are used to encrypt managed disks with CMK....
Correct Answer
Azure Key Vault + Disk Encryption Set
Why This Answer Is Correct
Disk Encryption Sets act as a container for your keys and are used to encrypt managed disks with CMK.
This question evaluates your knowledge of Scenario Based — a core concept tested in Microsoft Certified: Azure Administrator Associate (AZ-104). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Scenario: A company wants to host a public website on Azure. They need a service that provides global scale, SSL offloading, and WAF protection. Which service is the BEST fit?
Scenario: An administrator needs to migrate a legacy on-premises application to Azure that requires a shared folder accessed by SMB. Which service should they use?
Scenario: A team is deploying a multi-tier application. They want to ensure the database tier is NEVER directly accessible from the internet. How should this be configured?
Scenario: An organization wants to allow their developers to self-provision environments but needs to ensure they only use a specific set of VM sizes to keep costs under control. Which feature should be used?
Scenario: A university needs to host a website that handles seasonal registration spikes. They need a solution that can automatically scale up and down based on the number of concurrent sessions. Which service is BEST?