Examkin

Question

Difficulty: MediumConfigure Azure Data Box and Import/Export Services

Your company has an on-premises datacenter with a slow internet connection. You need to import 12 TB12\text{ TB} of data from a local Windows file server to an Azure storage account named `mystorageacct`. You decide to use the Azure Import/Export service. You attach three empty, supported 4 TB4\text{ TB} SATA hard drives to a local system and plan to use the WAImportExport tool to prepare the drives. Which of the following is a requirement to successfully complete the drive preparation and create the import job?

  1. You must run the WAImportExport tool to copy the data and encrypt the drives using BitLocker, then upload the resulting journal (.jrn) files when creating the import job in the Azure portal.Answer
  2. B
    You must temporarily disable the firewall on mystorageacct so the WAImportExport tool can establish a secure HTTPS connection and stream the copy metadata to the storage account during preparation.
  3. C
    You must assign the Microsoft Entra ID role of Storage Blob Data Reader to the WAImportExport tool service principal to authorize the local BitLocker encryption process.
  4. D
    You must generate a Shared Access Signature (SAS) token with an expiration window of at least one year and save it to the root of each drive to allow the Azure datacenter to decrypt the drives.

Answer

You must run the WAImportExport tool to copy the data and encrypt the drives using BitLocker, then upload the resulting journal (.jrn) files when creating the import job in the Azure portal.
The correct answer is the option requiring the WAImportExport tool to copy the data, encrypt the drives using BitLocker, and upload the resulting journal (.jrn) files. During the preparation phase of the Azure Import/Export service, the WAImportExport tool performs local copy operations, secures the drives with BitLocker encryption, and produces journal files that link the drive identifier to its specific BitLocker key. These journal files must be uploaded to the Azure portal during job creation so the datacenter can safely unlock the drives and ingest the data.

Step-by-Step Solution

1
Run the WAImportExport tool on the local system.
The data is copied to the SATA drives, the drives are encrypted with BitLocker, and a journal (.jrn) file is generated for each drive.
The WAImportExport tool prepares the physical media by copying files and securing them using BitLocker, producing journal files containing encryption and drive details.
2
Create an import job in the Azure portal and upload the journal (.jrn) files.
The import job is created in Azure with the correct drive mapping and BitLocker keys.
Azure requires the journal files to map the drives to the import job and to decrypt the drive contents once they arrive at the Azure datacenter.
3
Ship the physical drives to the designated Azure datacenter.
Azure staff attach the drives and import the data into the storage account.
The physical transport bypasses network limitations to move the data securely.

Key Concept

Azure Import/Export Drive Preparation and Job Creation Flow
Rate this question

Topics

Configure Azure Data Box and Import/Export Services

More questions from this topic