Configuring Windows Server Hybrid Advanced Services — Question 27

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and uses Azure Disk Encryption.

You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize administrative effort.

Which PowerShell cmdlet should you run?

Answer options

• A. Get-AzKeyVaultKey
• B. Get-AzKeyVault
• C. Get-AzVMDiskEncryptionStatus
• D. Get-AzDiskEncryptionSet

Correct answer: C

Explanation

The correct cmdlet, Get-AzVMDiskEncryptionStatus, provides the status of disk encryption for a specified virtual machine, including information about the Azure key vault used for the encryption keys. The other options do not specifically retrieve the encryption status for a virtual machine and thus would not directly indicate which key vault is associated with VM1's encryption keys.