Soru

Zorluk: ZorCompute Virtualization Solutions

A healthcare provider is designing the Azure compute virtualization infrastructure for a clinical trial analysis application that processes sensitive patient data. The solution must satisfy the following requirements:

* Confidentiality: The patient data must be encrypted in memory during processing to prevent access by hypervisor administrators or other tenants.
* Resilience: The application virtual machines must be distributed across multiple physical hardware racks (fault domains) within an Azure region to guarantee high availability without allocating dedicated physical servers.
* Availability: The compute tier must support a 99.95%99.95\% availability SLA.
* Storage: The application requires high-performance disk storage supporting at least 5,000 IOPS5,000\text{ IOPS} per virtual machine instance for transaction logging.
* Licensing Costs: The solution must leverage existing Windows Server licenses to minimize operational expenses.

Which of the following compute virtualization designs should you recommend?

  1. A
    Deploy a Virtual Machine Scale Set in Flexible orchestration mode using DCasv5-series Spot Virtual Machines with Premium SSD disks, and enable Azure Hybrid Benefit.
  2. B
    Deploy a Virtual Machine Scale Set in Flexible orchestration mode using DCasv5-series confidential virtual machines with Standard HDD disks, and enable Azure Hybrid Benefit.
  3. Deploy a Virtual Machine Scale Set in Flexible orchestration mode using DCasv5-series confidential virtual machines with Premium SSD disks, and enable Azure Hybrid Benefit.Cevap
  4. D
    Deploy a Virtual Machine Scale Set in Flexible orchestration mode using DCasv5-series confidential virtual machines with Premium SSD disks, allocating all instances within a single Availability Zone and a single fault domain.

Cevap

Deploy a Virtual Machine Scale Set in Flexible orchestration mode using DCasv5-series confidential virtual machines with Premium SSD disks, and enable Azure Hybrid Benefit.
The correct design uses a Virtual Machine Scale Set in Flexible orchestration mode with DCasv5-series confidential VMs and Premium SSD disks. The DCasv5-series virtual machines provide hardware-based memory encryption using AMD SEV-SNP to meet the confidentiality requirement. Flexible orchestration mode allows distributing virtual machines across multiple physical fault domains to ensure high availability without the overhead of renting dedicated physical hardware. Premium SSDs satisfy the storage requirement of 5,000 IOPS5,000\text{ IOPS} for transaction logging, and Azure Hybrid Benefit allows the reuse of existing Windows Server licenses to minimize operational costs.

Adım Adım Çözüm

1
Evaluate the confidentiality and licensing requirements to select the appropriate virtual machine configuration.
Select DCasv5-series confidential virtual machines and enable Azure Hybrid Benefit.
DCasv5-series VMs utilize AMD SEV-SNP to provide hardware-based memory encryption. Azure Hybrid Benefit allows the customer to reuse existing Windows Server licenses to minimize compute costs.
2
Determine the scale-out compute structure and resilience requirements.
Choose a Virtual Machine Scale Set (VMSS) in Flexible orchestration mode.
Flexible orchestration mode allows spreading VMs across fault domains without dedicated physical hardware, providing a 99.95%99.95\% SLA for individual VM instances, which meets the resilience and availability targets.
3
Evaluate the disk performance parameters.
Select Premium SSD storage.
Premium SSDs support the required 5,000 IOPS5,000\text{ IOPS} target with low latency, unlike Standard HDDs which fail to meet the performance threshold.

Anahtar Kavram

Designing secure, high-availability virtualized workloads on Azure using Virtual Machine Scale Sets in Flexible orchestration mode and Confidential VMs (DCasv5-series).
Bu soruyu puanla