次の表に示すAzure Key Vaultを含むSub1という名前のAzureサブスクリプションがあります。 Sub1では、次の構成を持つ仮想マシンを作成します。 * Name: VM1 * Size: DS2v2 * Resource group: RG1 * Region: West Europe * Operating system: Windows Server 2016 You plan to enable Azure Disk Encryption on VM1. In which key vaults can you store the encryption key for VM1?
正解:A
Explanation In order to make sure the encryption secrets don't cross regional boundaries, Azure Disk Encryption needs the Key Vault and the VMs to be co-located in the same region. Create and use a Key Vault that is in the same region as the VM to be encrypted. Reference: https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-prerequisites