ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 108 - AZ-120 discussion

Report
Export

HOTSPOT

You have an SAP landscape on Azure.

You plan to deploy a new SAP application server by using an Azure Resource Manager template.

You need to ensure that all new servers are deployed with Azure Disk Encryption enabled.

How should you complete the relevant component of the template? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question 108
Correct answer: Question 108

Explanation:

Box 1: extensions

Azure Disk Encryption can be enabled via Azure PowerShell or Azure CLI. That is normally seen in remediation. In a real-world scenario you would like to see a virtual machine during its creation include disk encryption process. This is technically possible thanks to Disk Encryption VM extension.

Box 2: AzureDiskEncryption Example:

..

"type": "Microsoft.Compute/virtualMachines/extensions",

"name": "[concat(parameters('vmName'),'/diskEncryption')]",

"location": "[parameters('location')]",

"dependsOn": [

"[resourceId('Microsoft.Compute/virtualMachines/', parameters('vmName'))]"

],

"properties": {

"publisher": "Microsoft.Azure.Security",

"type": "AzureDiskEncryption",

..

Reference: https://azsec.azurewebsites.net/2019/12/28/azure-disk-encryption-arm-template-for-windows-vm/

asked 02/10/2024
Ahmed Ebrahim
44 questions
User
0 comments
Sorted by

Leave a comment first