Question

Difficulty: MediumCreate and Configure Virtual Machines

You are planning the deployment of several Azure virtual machines. Match each VM deployment requirement to the appropriate Azure configuration feature. To answer, drag the appropriate feature from the column on the right to the requirement on the left. (Each feature may be used once, more than once, or not at all.)

  • Run a configuration script inside a virtual machine immediately after deployment without manual login.Custom Script Extension
  • Troubleshoot startup and boot failures by inspecting OS serial log output and VM screenshots.Boot Diagnostics
  • Run virtual machines on physical servers that are dedicated to a single Azure subscription to meet strict compliance requirements.Azure Dedicated Host
  • Cryptographically secure the virtual machine's OS and data disks using keys stored in Azure Key Vault.Azure Disk Encryption

Answer

Match the requirements to the features as follows: Run script -> Custom Script Extension; Troubleshoot boot -> Boot Diagnostics; Dedicated physical servers -> Azure Dedicated Host; Encrypt disks -> Azure Disk Encryption.
The correct matches align with standard Azure VM feature capabilities. The Custom Script Extension is ideal for post-deployment scripts. Boot Diagnostics provides serial log and screenshot capabilities. Azure Dedicated Host ensures physical machine isolation for compliance. Azure Disk Encryption provides cryptographic disk protection using Key Vault.

Step-by-Step Solution

1
Analyze the requirement for automated post-provisioning scripting.
Identify that the Custom Script Extension executes scripts directly inside the guest OS during provisioning.
To automate VM configuration without requiring manual administrator login.
2
Analyze the requirement for troubleshooting boot failures using screenshots and logs.
Identify that Boot Diagnostics captures the VM's serial output and console screenshots.
To debug operating system startup issues when the VM is inaccessible via network protocols.
3
Analyze the compliance requirement for physical hardware isolation.
Identify that Azure Dedicated Host provides dedicated physical infrastructure at the host level.
To ensure host-level isolation from other customer workloads.
4
Analyze the disk encryption requirement with customer-managed keys.
Identify that Azure Disk Encryption uses BitLocker (Windows) or DM-Crypt (Linux) integration with Azure Key Vault.
To encrypt VM disks at the operating system level.

Key Concept

Selecting and configuring appropriate Azure Virtual Machine features and extensions based on deployment requirements.
Rate this question