Planning and Administering Microsoft Azure for SAP Workloads — Question 64

You have an Azure subscription.

You plan to deploy SAP on Azure.

You need to recommend a disk encryption solution for virtual machines. The solution must meet the following requirements:

• Support the encryption of operating system, data, and temp disks.
• Support the encryption of data at rest and data in transit.
• Minimize CPU overhead on the virtual machines.

What should you include in the recommendation?

Answer options

• A. Azure Disk Encryption
• B. server-side encryption (SSE)
• C. Confidential disk encryption
• D. encryption at host

Correct answer: D

Explanation

The correct answer is D, encryption at host, as it provides encryption for operating system, data, and temp disks while minimizing CPU overhead. Azure Disk Encryption (A) does not meet the requirement for minimizing CPU impact, while server-side encryption (B) and Confidential disk encryption (C) do not support encryption for data in transit in the same manner.