Question

Difficulty: MediumMigration Assessment and Strategy

A logistics enterprise plans to migrate a multi-tier distribution application from an on-premises VMware vSphere environment to Azure. You need to design an Azure Migrate assessment strategy that maps network dependencies between the virtual machines to determine optimal migration waves. The enterprise security policy imposes the following constraints:
- No software agents can be installed on the application virtual machines.
- The use of domain administrator or root credentials for guest operating system access is strictly prohibited.

Which dependency mapping strategy should you recommend?

  1. Configure agentless dependency analysis in Azure Migrate by utilizing guest operating system credentials that have standard user permissions or non-root SSH access.Answer
  2. B
    Deploy the Azure Migrate appliance and configure agent-based dependency analysis by installing the Dependency Agent and Microsoft Monitoring Agent on each virtual machine.
  3. C
    Configure agentless dependency analysis in Azure Migrate by providing domain administrator credentials for Windows virtual machines and root credentials for Linux virtual machines.
  4. D
    Establish a Microsoft Entra Domain Services managed domain to synchronize on-premises identity credentials and authorize the dependency scanning process.

Answer

Configure agentless dependency analysis in Azure Migrate by utilizing guest operating system credentials that have standard user permissions or non-root SSH access.
The correct option is to use agentless dependency analysis in Azure Migrate using standard guest operating system credentials with minimum privileges. Azure Migrate agentless dependency analysis for VMware VMs does not install any agents on the virtual machines. For Windows, it can use a local or domain user account with standard permissions (granted WMI/COM access), and for Linux, it can use a standard user account with SSH access, satisfying both security constraints.

Step-by-Step Solution

1
Analyze the security constraints regarding agent installation and credential access permissions.
Identified that any solution requiring VM-level agents or domain administrator/root credentials must be excluded.
Ensures design compliance with enterprise security requirements.
2
Evaluate Azure Migrate dependency mapping capabilities for VMware vSphere virtual machines.
Agentless dependency analysis is selected since it does not install agents and retrieves network connection data via the hypervisor and guest OS APIs.
Allows mapping of dependencies without software footprint on the target VMs.
3
Determine the minimum privilege requirements for guest OS access in agentless dependency analysis.
Confirmed that Windows virtual machines require either local/domain administrator or a standard user with specific WMI/COM permissions, and Linux virtual machines require a standard user with SSH access (no root required).
Meets the constraint forbidding domain administrator and root accounts.

Key Concept

Azure Migrate agentless dependency analysis for VMware workloads allows mapping network connections without VM agents or highly privileged guest OS credentials (domain admin/root).
Estimated Time:1m 30s
Rate this question