Soru

Zorluk: Çok zorCreate and Configure Virtual Machines

An administrator is deploying a high-availability application that consists of three virtual machines in the East US region. The virtual machines are placed in a resource group named RG-Prod. A ReadOnly resource lock is applied to RG-Prod.

The deployment requirements and configurations are:
- The virtual machines must be protected against datacenter-wide failures, so they are deployed across three Availability Zones in East US.
- The virtual machines must be backed up daily, so a Recovery Services vault is created in the East US 2 region.
- Boot diagnostics for the virtual machines must be written to an Azure storage account that restricts public access. The storage account firewall is configured to allow access from selected networks only, and the 'Allow trusted Microsoft services to access this storage account' option is disabled.

You need to identify the configuration issues and operational limitations of this setup.

Which of the following statements are correct? (Select two.)

  1. The daily backups will fail to configure because the Recovery Services vault and the virtual machines are not in the same region.Cevap
  2. Administrators will be unable to start or stop the virtual machines from the Azure Portal because the ReadOnly resource lock prevents these actions.Cevap
  3. C
    To satisfy the requirement of protecting the virtual machines from datacenter-wide failures, they should be deployed in an Availability Set instead of Availability Zones.
  4. D
    The boot diagnostics will write successfully to the storage account because virtual machine diagnostic agents automatically bypass storage firewall rules without requiring the 'Allow trusted Microsoft services' setting.

Cevap

The daily backups will fail to configure because the Recovery Services vault and the virtual machines are not in the same region, and administrators will be unable to start or stop the virtual machines because of the ReadOnly lock on the resource group.
The configuration will fail to configure backups because the Recovery Services vault and virtual machines must reside in the same region. Additionally, the ReadOnly lock applied at the resource group level inherits to all VMs within it, preventing any state modification operations (including starting and stopping).

Adım Adım Çözüm

1
Evaluate the backup configuration against region constraints.
The Recovery Services vault in East US 2 cannot back up virtual machines in East US.
Azure Backup enforces that the vault and the target VMs must reside in the same region.
2
Determine the impact of the ReadOnly lock on VM management.
Starting and stopping the VMs is blocked.
Power management commands modify the resource state, which constitutes a write action blocked by a ReadOnly lock.
3
Compare Availability Zones and Availability Sets for resiliency.
Availability Zones protect against datacenter-wide failures, while Availability Sets protect only against single-datacenter hardware faults.
Zones are physically separate datacenters, providing the required level of high availability.
4
Analyze storage firewall settings for boot diagnostics.
Boot diagnostics will fail to write to the storage account because the trusted services bypass is disabled.
When a storage account firewall is active, access must be explicitly allowed for diagnostic data transit.

Anahtar Kavram

Azure Virtual Machine creation and configuration including high availability options, resource locks, regional backup constraints, and storage diagnostics settings.
Bu soruyu puanla