Diagram
A system architecture showing how Azure Disk Encryption uses BitLocker or DM-Crypt on VM OS and data disks, with encryption keys managed and retrieved from an Azure Key Vault configured with soft-delete, purge protection, and access policies.
Overview of Azure Disk Encryption
Azure Disk Encryption protects data at rest on virtual machines by encrypting both operating system and data disks using BitLocker for Windows machines and DM-Crypt for Linux machines. The encryption keys are managed through Azure Key Vault, which must be located in the same region and subscription as the virtual machines being protected—this regional alignment is critical because the encryption process requires the Key Vault and VM to communicate without crossing regional boundaries.
Domain 2 of 4
241 practice questions
Practice this DomainLast updated