Soru

Zorluk: OrtaAzure Virtual Machine Recovery and Restore

A company runs a Windows Server virtual machine named vm-hr-encryption that uses Azure Disk Encryption (ADE) to secure its OS and data disks. The virtual machine is backed up daily to a Recovery Services vault. Following a failed software installation, the operating system on the virtual machine is corrupted and cannot boot. The operations team needs to recover the virtual machine to a functional state using the latest recovery point. What is the correct method to recover this virtual machine?

  1. A
    Deploy a new virtual machine directly from the recovery point by selecting the 'Create virtual machine' option in the Azure portal.
  2. B
    Overwrite the corrupted disks of the running virtual machine by selecting the 'Replace existing' option in the Azure portal.
  3. Restore the virtual machine's disks to a staging storage account, and then recreate the virtual machine using PowerShell or a template.Cevap
  4. D
    Download the Item-Level Recovery script to mount the recovery point volume and manually overwrite the system files.

Cevap

Restore the virtual machine's disks to a staging storage account, and then recreate the virtual machine using PowerShell or a template.
For virtual machines encrypted using Azure Disk Encryption (ADE), direct restoration methods such as creating a new virtual machine or replacing existing disks directly from the Recovery Services vault are not supported. Instead, you must restore the virtual machine disks to a staging storage account first. After the disks are restored, you must recreate the virtual machine using PowerShell or an Azure Resource Manager (ARM) template by linking the restored disks and the original Key Vault secret configuration.

Adım Adım Çözüm

1
Select the Recovery Services vault, navigate to the backup items, and choose the backup item for the encrypted virtual machine.
The backup dashboard for the virtual machine is displayed, showing the available recovery points.
To initiate the recovery process from the correct backup location.
2
Select the latest recovery point, choose the 'Restore disks' option, and specify a staging storage account.
A restore job is created to extract the virtual machine disks to the staging storage account.
Direct virtual machine creation or disk replacement is not supported for Azure Disk Encryption (ADE) encrypted virtual machines.
3
Use the restored disks template or run a PowerShell script to create a new virtual machine referencing the restored disks and the original Key Vault settings.
A fully functional, encrypted virtual machine is deployed using the restored disks.
To complete the VM recreation process and associate the restored disks with the appropriate key vault secrets.

Anahtar Kavram

Azure Disk Encryption (ADE) restore constraints

Alternatif Yöntem

Alternatively, you can perform the restore using Azure CLI by first running 'az backup restore restore-disks' and then creating the VM from the restored managed disks using the CLI or a customized ARM template.
Tahmini Süre:1m 30s
Bu soruyu puanla