Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-801 Exam - Topic 3 Question 82 Discussion

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and uses Azure Disk Encryption.You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize administrative effort.Which PowerShell cmdlet should you run?
C) Get-AzVMDiskEncryptionStatus
A) Get-AzKeyVaultKey
B) Get-AiKeyVault
D) Get-AzDiskEncryptionSet

Microsoft AZ-801 Exam - Topic 3 Question 82 Discussion

Actual exam question for Microsoft's AZ-801 exam
Question #: 82
Topic #: 3
[All AZ-801 Questions]

You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server and uses Azure Disk Encryption.

You need to identify which Azure key vault stores the encryption keys for VM1. The solution must minimize administrative effort.

Which PowerShell cmdlet should you run?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Eloisa at Aug 14, 2025, 03:51 PM

Limited Time Offer

25%

Off

Get Premium AZ-801 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Xuan
7 months ago
Not so sure about C, could be A too.
upvoted 0 times
...
Vincenza
8 months ago
Definitely agree with C! That's the right one.
upvoted 0 times
...
Beatriz
8 months ago
I think it's C, Get-AzVMDiskEncryptionStatus.
upvoted 0 times
...
Deonna
8 months ago
C is the best choice for this scenario, no doubt!
upvoted 0 times
...
Kimbery
8 months ago
Wait, I thought we needed to check the key vault directly?
upvoted 0 times
...
Malinda
8 months ago
I remember that Get-AzDiskEncryptionSet is related to disk encryption, but I'm not confident if it's the one that directly identifies the key vault for VM1.
upvoted 0 times
...
Mindy
9 months ago
I practiced a similar question where we had to find key vaults, but I can't recall if Get-AzKeyVaultKey is the right cmdlet for this scenario.
upvoted 0 times
...
Bronwyn
9 months ago
I'm not entirely sure, but I feel like Get-AzVMDiskEncryptionStatus could be the right choice since it sounds like it would show the encryption details for VM1.
upvoted 0 times
...
Alexis
9 months ago
I think I remember that to check the encryption status of a VM, we might need to use a cmdlet related to disk encryption.
upvoted 0 times
...
Kati
9 months ago
Okay, I've got this. The key here is to use the cmdlet that deals directly with Azure Disk Encryption, which is Get-AzVMDiskEncryptionStatus. That should give me the information I need to identify the key vault.
upvoted 0 times
...
Benton
9 months ago
I'm a little confused by this question. There are a few different cmdlets related to encryption and key vaults, and I'm not sure which one is the best fit for this specific scenario. I'll need to think it through carefully.
upvoted 0 times
...
Hershel
10 months ago
Ah, this is a good one. I remember learning about the Get-AzVMDiskEncryptionStatus cmdlet, which should give me the information I need to identify the key vault storing the encryption keys for VM1.
upvoted 0 times
...
Della
10 months ago
Hmm, I'm a bit unsure about this one. There are a few different cmdlets related to encryption and key vaults, so I'll need to carefully review the options to determine which one is the most appropriate for this scenario.
upvoted 0 times
...
Lacey
10 months ago
This seems like a straightforward question. I think the key is to identify the cmdlet that specifically deals with Azure Disk Encryption, which would likely give me the information I need about the key vault.
upvoted 0 times
...
Julene
10 months ago
I bet the guy who wrote this question is having a good laugh. 'Minimize administrative effort' - that's like the holy grail for us sysadmins, right?
upvoted 0 times
...
Mel
10 months ago
I think the answer is A) Get-AzKeyVaultKey.
upvoted 0 times
...
France
12 months ago
Agreed, C is the way to go. Why even consider the other options? They don't seem relevant at all.
upvoted 0 times
Brock
10 months ago
Yeah, C seems like the best choice. The others don't really fit the scenario.
upvoted 0 times
...
Lai
10 months ago
I think C is the correct option. It's the most relevant one.
upvoted 0 times
...
...
Eva
12 months ago
C) Get-AzVMDiskEncryptionStatus seems like the obvious choice here. It should give us the info we need with minimal effort.
upvoted 0 times
Karma
10 months ago
B) Get-AiKeyVault
upvoted 0 times
...
Cecilia
10 months ago
A) Get-AzKeyVaultKey
upvoted 0 times
...
...

Save Cancel