Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam

Exam AZ-303 topic 5 question 111 discussion

Actual exam question from Microsoft's AZ-303

Question #: 111
Topic #: 5

HOTSPOT -
You have an Azure subscription that contains the resources shown in the following table.

You plan to deploy an Azure virtual machine that will have the following configurations:
✑ Name: VM1
✑ Azure region: Central US
✑ Image: Ubuntu Server 18.04 LTS
✑ Operating system disk size: 1 TB
✑ Virtual machine generation: Gen 2
✑ Operating system disk type: Standard SSD
You need to protect VM1 by using Azure Disk Encryption and Azure Backup.
On VM1, which configurations should you change? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: Virtual machine generation
Azure Disk Encryption is not available on Generation 2 VMs) and Lsv2-series VMs).

Box 2: Azure Region -
Backup is within a region.
You need a Recovery Services vault in every Azure region that contains VMs you want to back up. You can't back up to a different region.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview https://docs.microsoft.com/en-us/azure/backup/backup-support-matrix

by Blimpy at Jan. 16, 2021, 7:26 a.m.

Comments

Submit Cancel

jallaix

Highly Voted 4 years, 4 months ago

Question is obsolete: Gen2 VMs now support ADE https://docs.microsoft.com/fr-fr/azure/virtual-machines/generation-2

upvoted 28 times

...

PegasusForever

Highly Voted 4 years, 5 months ago

A) Azure Disk Encryption is integrated with Azure Key Vault to help you control and manage the disk encryption keys and secrets. Azure Disk Encryption is not available on Generation 2 VMs and Lsv2-series VMs. https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview --> Answer A is correct. B) Azure Backup uses Recovery Services vaults to orchestrate and manage backups for the following workload types - Azure VMs, SQL in Azure VMs, SAP HANA in Azure VMs, Azure File shares and on-premises workloads using Azure Backup Agent, Azure Backup Server and System Center DPM. Backup is within a region. You need a vault in every Azure region that contains VMs you want to back up. https://docs.microsoft.com/en-us/azure/backup/backup-support-matrix#vault-support --> Answer B is correct Both answers are correct!

upvoted 8 times

junear

4 years, 4 months ago

Azure Disk Encryption is supported on Generation 1 and Generation 2 VMs.--from the link

upvoted 3 times

...

Helice

3 years, 4 months ago

https://docs.microsoft.com/es-es/azure/virtual-machines/windows/disk-encryption-overview AKV should be in the same region than VM

upvoted 1 times

...

sethiko

Most Recent 3 years, 6 months ago

Ubuntu is incompatible as operating system for Azure Disk Encription, so must be Image on first box: https://docs.microsoft.com/es-es/azure/virtual-machines/windows/disk-encryption-overview

upvoted 1 times

DeepHouse

3 years, 5 months ago

Of course a Linux OS isn't in the list of supposed windows versions. Try using the link for the supported Linux OSs and you will find that Ubuntu 18.04 is supported. https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview

upvoted 1 times

...

syu31svc

3 years, 11 months ago

Gen 2 is supported for encryption so this qn is invalid

upvoted 4 times

...

oshoparsi

4 years, 6 months ago

To successfully back up, virtual machines must be in the same subscription as the vault for backup.

upvoted 2 times

...

jy00271070

4 years, 6 months ago

if we change the region of VM to West US to fulfill the backup, then, the disk encryption will no longer work as the key vault is located in central US...

upvoted 1 times

genmai

4 years, 6 months ago

jy00271070, You are right. I couldn't understand this question. https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview#encryption-key-storage-requirements > Encryption key storage requirements Azure Disk Encryption requires an Azure Key Vault to control and manage disk encryption keys and secrets. Your key vault and VMs must reside in the same Azure region and subscription.

upvoted 1 times

...

inf

4 years, 6 months ago

The question does not state that 'both' answers form part of the solution. Each question is mutually exclusive is how I read it.

upvoted 2 times

...

Blimpy

4 years, 6 months ago

Azure Disk Encryption is not available on Generation 2 VMs) and Lsv2-series VMs)-- refers to a long list of limitations for disk encryption on linux ... link: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-linux#unsupported-scenarios

upvoted 4 times

heany

4 years, 4 months ago

The first question should also be region. Azure Disk Encryption is supported on Generation 1 and Generation 2 VMs - https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview . For customer managed disk encryption key, "All resources related to your customer-managed keys (Azure Key Vaults, disk encryption sets, VMs, disks, and snapshots) must be in the same subscription and region.: - https://docs.microsoft.com/en-us/azure/virtual-machines/disk-encryption

upvoted 1 times

mustaq1988

4 years, 4 months ago

Customer managed disk encryption is different and ADE is different

upvoted 2 times

...