VM and Resource Management

Question 1

Disk Encryption

Answer 1

-Protects data on virutal machines
-uses BitLocker on Windows VM to encrypt OS and data disks
-Uses DM-Crypt on Linux VMs to encrypt OS and data disks
-Integrated with Azure Key Vault. The Key Vauly must reside in the same regin and subscription as the VM being encrypted
-Supported Windows VMs: Gen1 VMs and Gen 2 VMs, VMs with premium storage

Question 2

Azure Disk Encryption is not possible on:

Answer 2

basic tier virutal machines as well as A-series VMs or on VMs with less than 2 GB of RAM

Question 3

Disk Encryption only works on a Linux VM if:

Answer 3

DM-Crypt and VFAT modules are present

Question 4

Blueprints

Answer 4

a declarative way to orchestrate the deployment of various resource templates and other artifcats such as:
-role assignments
-policy assignments
-Azure Resource Manager templates
-Resource Groups

Each published version of a blueprint can be assigned to an existing management group or subscription

Question 5

Where cna you buy an Azure Premium P2 subscription?

Answer 5

M365 Admin portal

Question 6

Resources contained within a Resource Group can span:

Answer 6

multiple regions

Question 7

Resource Locks

Answer 7

When a lock is applied at a parent scope, all resources withint that scipe inherit the lock. Resources added later will also inherit the lock from the parent

the most restrictive lock in the inheritance takes precendence

Question 8

Resources

Answer 8

a resources region cannot be changed!
-you can move resources to different resource groups, but the region of the resource cannot change

Question 9

You need to monitor the metrics and logs of a Linux VM, what should you use?

Answer 9

Linux Diagnostic Extension (LAD)

Question 10

When you add a monitoring solution to a subscription, it is auto deployed by default to all Windows/Linux agents connected to Log Analytics workspace. You may want to limit costs by sending only selected agents. What 3 steps?

Answer 10

1. Create a computer group
2. Create a scope configuration
3. Apply the scope configuration to the solution

Question 11

Azure VM extensions

Answer 11

-can be deployed with Azure Resource Manager templates
-templates are ideal when deploying one or more VMs that require post deployment configurations such as onboarding to Azure Anitmalware