Question

Difficulty: MediumCreate and Configure Virtual Machines

An administrator is deploying a new virtual machine named WebVM1 to host a stateless web application. The deployment must meet the following requirements:
- Use an Ephemeral OS disk with a size of 128128 GB.
- Allow WebVM1 to read files from a container in an Azure storage account named storage1.
Which two actions should you perform? (Select two.)

  1. Select a virtual machine size that provides a local cache or temporary storage size of at least 128128 GB.Answer
  2. Assign the Storage Blob Data Reader role to the managed identity of WebVM1 at the scope of storage1.Answer
  3. C
    Assign the Contributor role to the managed identity of WebVM1 at the scope of storage1.
  4. D
    Assign the virtual machine deployment administrator a Microsoft Entra ID role scoped to an Administrative Unit containing WebVM1's resource group.
  5. E
    Apply a ReadOnly lock to the resource group containing WebVM1 prior to VM deployment.

Answer

To support this configuration, you must select a virtual machine size that provides a local cache or temporary storage size of at least 128128 GB, and assign the Storage Blob Data Reader role to the managed identity of WebVM1 at the scope of storage1.
Selecting a virtual machine size with a local cache or temporary storage size of at least 128128 GB ensures there is sufficient local capacity to host the 128128 GB Ephemeral OS disk. Assigning the Storage Blob Data Reader role to the managed identity of WebVM1 at the scope of storage1 provides the necessary data-plane permissions for the VM to read files from the blob containers.

Step-by-Step Solution

1
Analyze the storage requirements for deploying a virtual machine with an Ephemeral OS disk.
Identify that the chosen virtual machine size must have a local cache or temporary disk capacity equal to or greater than the desired OS disk size (128128 GB).
Ephemeral OS disks are created on local virtual machine storage (cache or temporary disk) rather than remote Azure storage.
2
Configure the access control settings to allow the virtual machine to read files from the storage account.
Identify that the Storage Blob Data Reader role must be assigned to the virtual machine's managed identity at the storage account scope.
Reading blobs from a container requires data plane permissions, which are provided by the Storage Blob Data Reader role rather than standard control-plane roles.

Key Concept

Configuring virtual machine storage and access control during creation.
Estimated Time:2m 0s
Rate this question