An administrator is deploying several Azure virtual machines (VMs) and must configure their storage, boot architecture, and encryption capabilities. How should the administrator match each Azure VM feature on the left with its correct description on the right?
- Ephemeral OS DiskStores the operating system directly on the local VM node's cache or temporary disk, providing low latency and zero remote disk storage costs.
- Trusted LaunchProtects the guest operating system against boot-level and kernel-level malware using Secure Boot and a virtual Trusted Platform Module (vTPM).
- Encryption at HostEncrypts temporary disks, ephemeral OS disks, and OS/data disk caches locally on the VM hosting server before the data flows to Azure Storage.
- Generation 2 VMEnables a UEFI-based boot architecture, supports OS disks larger than 2 TB, and serves as a prerequisite for advanced hardware-based security features.
Answer
Ephemeral OS Disk matches the description of storing the operating system directly on local storage. Trusted Launch matches the description of protecting against boot/kernel malware via Secure Boot and vTPM. Encryption at Host matches the description of encrypting temp/ephemeral disks and caches on the VM host server. Generation 2 VM matches the description of enabling UEFI boot architecture and supporting OS disks larger than 2 TB.
The correct pairings align the specific capabilities of each feature: Ephemeral OS disks place the OS locally on the host node; Trusted Launch uses UEFI Secure Boot and vTPM for boot-path protection; Encryption at Host encrypts local host caches and temporary disks before sending data to Azure Storage; and Generation 2 VMs implement the UEFI boot architecture which supports disks larger than 2 TB.
Step-by-Step Solution
Key Concept
Azure Virtual Machine creation and configuration settings including storage performance, boot architecture, and security enhancements.
Estimated Time:1m 30s