AZ104-Q: encrypt VM data at the host
A security baseline requires encryption of data at rest in the VM host infrastructure. Which VM setting addresses that requirement?
- A) A network security group.
- B) Encryption at host, after confirming the size, region, and VM support it. ✓
- C) An App Service certificate binding.
- D) Azure DNS private zones. Answer: B. Encryption at host extends at-rest encryption protection to host infrastructure components for supported VMs. Why not the others: Networking, App Service TLS, and DNS do not configure VM host encryption.