Examkin

Question

Difficulty: MediumAzure Virtual Machine Recovery and Restore

A company runs a Windows Server virtual machine named vm-hr-encryption that uses Azure Disk Encryption (ADE) to secure its OS and data disks. The virtual machine is backed up daily to a Recovery Services vault. Following a failed software installation, the operating system on the virtual machine is corrupted and cannot boot. The operations team needs to recover the virtual machine to a functional state using the latest recovery point. What is the correct method to recover this virtual machine?

  1. A
    Deploy a new virtual machine directly from the recovery point by selecting the 'Create virtual machine' option in the Azure portal.
  2. B
    Overwrite the corrupted disks of the running virtual machine by selecting the 'Replace existing' option in the Azure portal.
  3. Restore the virtual machine's disks to a staging storage account, and then recreate the virtual machine using PowerShell or a template.Answer
  4. D
    Download the Item-Level Recovery script to mount the recovery point volume and manually overwrite the system files.

Answer

Restore the virtual machine's disks to a staging storage account, and then recreate the virtual machine using PowerShell or a template.
For virtual machines encrypted using Azure Disk Encryption (ADE), direct restoration methods such as creating a new virtual machine or replacing existing disks directly from the Recovery Services vault are not supported. Instead, you must restore the virtual machine disks to a staging storage account first. After the disks are restored, you must recreate the virtual machine using PowerShell or an Azure Resource Manager (ARM) template by linking the restored disks and the original Key Vault secret configuration.

Step-by-Step Solution

1
Select the Recovery Services vault, navigate to the backup items, and choose the backup item for the encrypted virtual machine.
The backup dashboard for the virtual machine is displayed, showing the available recovery points.
To initiate the recovery process from the correct backup location.
2
Select the latest recovery point, choose the 'Restore disks' option, and specify a staging storage account.
A restore job is created to extract the virtual machine disks to the staging storage account.
Direct virtual machine creation or disk replacement is not supported for Azure Disk Encryption (ADE) encrypted virtual machines.
3
Use the restored disks template or run a PowerShell script to create a new virtual machine referencing the restored disks and the original Key Vault settings.
A fully functional, encrypted virtual machine is deployed using the restored disks.
To complete the VM recreation process and associate the restored disks with the appropriate key vault secrets.

Key Concept

Azure Disk Encryption (ADE) restore constraints

Alternative Method

Alternatively, you can perform the restore using Azure CLI by first running 'az backup restore restore-disks' and then creating the VM from the restored managed disks using the CLI or a customized ARM template.
Estimated Time:1m 30s
Rate this question

Topics

Azure Virtual Machine Recovery and Restore

More questions from this topic