Exam Prep (70-533): Virtual Machines Objectives

Front 1

3 ways to create Azure VMs

Back 1

Management Portal

PowerShell

Cross platform tools

Front 2

2 methods of provisioning VMs

Back 2

Image = from Azure gallery

Disk = VHD (My Disks)

Front 3

Only Images supported for this command (not disks)

Back 3

New-AzureQuickVM

Front 4

Command supporting AD join, admin passwords, new or attach data disks, configureendpoints, disable Windows update, set time zone, set static IP address andcloud service name

Back 4

New-AzureVMConfig

Front 5

Name disk typical IOPS

Back 5

Basic =300 IOPS

Standard= 500 IOPS

(perdisk)

Front 6

Can Location can bechanged after VM creation

Back 6

No

Front 7

How to set static IP address

Back 7

onlyin Preview Portal or PowerShell

Front 8

Windows images require local administratorusername and password

Back 8

True

Front 9

Linux images require a password

Back 9

Optional

Front 10

2 tools to create SSL cert for Linux VM

Back 10

OpenSSL.exe

PuttyGen.exe

Front 11

Type of Certificates used by VMs

Back 11

-X509Certificates

(.cer or .pem)

Front 12

Name the Stop states for Azure VMs

Back 12

Stopped = compute billingstill occurs

Stopped (Deallocated) = maylose VIP

Front 13

Keep VIP of Cloud Service

Back 13

-StayProvisioned

Front 14

Default endpoints created for a VM

Back 14

RDP 3389

PowerShell (WinRM) 5986

Front 15

Default VM domain name

Back 15

cloudapp.net

Front 16

Linux endpoint

Back 16

TCP 22 (public & private, enabled by default)

Front 17

Linux VM provisioning: Authentication options

Back 17

Provide:

Certificiate (X.509)

or

Password

Front 18

Name the VM Extension Names for both Windows and Linux

Back 18

VMAccessAgent (Windows)

VMAccessForLinux (Linux)

Front 19

Azure Virtual Machine Monitoring : Azure Diagnostics Extension name

Back 19

IaaSDiagnostics

Front 20

What does the VMAccess extension provide

Back 20

The VMAccess extension enables you to reset Remote Desktop Access or Secure Shell (SSH) settings on a Virtual Machine and to reset the password for the account that has administrator or sudo authority.

Front 21

How to connect to Linux VM

Back 21

Putty session

Or

Ssh -p -l

If certificate used:

Ssh -I -p -l

Front 22

Windows Temp disk drive letter

Back 22

D:

Front 23

Data disk max

Back 23

1023GB

Front 24

OS disk HA

Back 24

When Azure creates anoperating system disk, three copies of the diskare created for high durability.

Front 25

VHDX support

Back 25

no

Front 26

Convert Disks from Dynamic to Fixed

Back 26

Add-AzureVHD converts Dynamic to Fixed automatically (or do it manually first withHyper-V Manager or PowerShell)

Save-AzureVHD does not convert Dynamic to Fixed - ensureenough free space!

Front 27

VM Image types (3)

Back 27

Legacy OS image

-OSState

Generalized

Specialized

Front 28

How to create a Generalized Image

Back 28

Windows - Sysprep

Linux - waagent -deprovision

Save-AzureVMImage -OSState Generalized

Then 'Capture' from Azure portal

Deploy from 'My Images'

Front 29

Specialized Images

Back 29

NotOOBE Generalized prior to Capture

Customizations- username, passwords, domain-join information stay the same

VMdoes not need to be in a Stopped state - could lead to dirty state capture

Donot select the check box for Sysprep has been run on Capture wizard

Save-AzureVMImage -OSState Specialized

Front 30

Azure boot disk options

Back 30

-OS "Windows"

-OS "Linux"

Front 31

Add-AzureDataDisk options

Back 31

-CreateNew (Blank vhd)

-Import (from My Images)

-ImportFrom (from Storage location)

Front 32

Copy Blobs between StorageAccounts

Back 32

Start-AzureStorageBlobCopy

Front 33

Deleting a VM options

Back 33

Delete the attached disks

Keep the attached disks

Front 34

Install VM Agent to a VM already running

Back 34

Download and install MSI package

(WindowsAzureVMAgent.xxx)

PowerShell

$name $vm.VM.ProvisionGuestAgent =$TRUE Update-AzureVM

Front 35

Reset VM password

Back 35

Set-AzureVMAccessExtension –UserName –Password | Update-AzureVM

Front 36

Fix RDP settings

Back 36

Calling Set-AzureVMAccessExtension with no parametersfixes any broken RDP settings.

Front 37

Enable BGInfo

Back 37

Set-AzureVMBGInfoExtension | Update-AzureVM

Front 38

How to enable VM Agent and Extensions on VMs createdfrom Disks

Back 38

Create VM On-Premise

Install VM Agent (msi)

Upload to Azure (Add-AzureVHD)

Provision VM from 'Disks'

Ensure VM Agent ticked

Front 39

Deploy scripts during VM provisioning

Back 39

Create and upload script to Azure Storage account

Set-AzureVMCustomScriptExtension -Fileurl

to run script after VM is provisioned use

Set-AzureVMCustomScriptExtension -Fileurl | Update-AzureVM

Front 40

Describe the Windows PowerShell Desired State Configuration (DSC) feature

Back 40

Fixes config drift

Enable / disable server roles and features

Start, Stop services

Discover actual config state

(uses Push or Pull methods)

LCM

MOF files

Front 41

Enable Puppet

Back 41

Select 'Puppet Enterprise Agent' from Configuration Extensions and enter Puppet Master Server name

Front 42

Puppet endpoints created

Back 42

TCP 8140

Https 443

MCollective 61613

Front 43

Enable Chef configuration

Back 43

No PowerShell commands

Select 'Chef' from Configuration Extensions

Front 44

Describe DIP

Back 44

A DIP is an internal IP address assigned by the Azure DHCP to the Virtual Machine.Once a compute resource within the cloud service has leased a DIP, it will notbe dropped until the compute resource is stopped or deallocated.

Front 45

Describe PIP

Back 45

A PIP is a public IP addressused for direct communicationto your compute resources (instances). As of right now each Azuresubscription can assign up to 5 PIPs. There’s also billing charges associatedwith PIPs. Use-case Passive FTP.

Front 46

Describe VIP

Back 46

The VIP is a public IP address that can be used to access your compute resourcesexternally.

Every worker role/web role/virtualmachine is contained within a cloud service – and upon the creation of the cloud service, it is assigned aVIP. The VIP comes from an IP address pool managed by Microsoft.

Front 47

Describe Reserved IP

Back 47

At this point, you can’t assign a reserved IP addressto an existing cloud service. Instead you should create a new cloudservice with the reserved IP address, re-provision the virtual machine usingthe same disks or redeploy the cloud service package and configuration(for worker roles and web roles) in the new cloud service.

A reserved VIP is useful whenever your service isexpected to always respond at the same IP address.

Front 48

How to set a VM DIP static IP

Back 48

Set-AzureStaticVNetIP

Get-AzureVM -ServiceName vnetvmsvc1 -Name vnetvm1 |
Set-AzureStaticVNetIP -IPAddress "10.0.0.4" |
Update-AzureVM

Front 49

Set Static VNET IP at creation time

Back 49

New-AzureVMConfig ...

Set-AzureStaticVNetIP -IPAddress "10.0.0.15"

Front 50

Domain name of internal VNET

Back 50

.f1.internal.cloudapp.net

Front 51

Maximum VMs in Cloud Service

Back 51

50

Front 52

Maximum endpoints per Cloud Service

Back 52

150

Front 53

Load Balanced Set types

Back 53

Public

Internal

Front 54

Two levels of load balancing available for Azure infrastructure services

Back 54

1. DNS (traffic manager, round robin)

2. Network (LBSet)

Front 55

Max ACLs per endpoint

Back 55

50

(set by CIDR notation)

Front 56

Set-AzureAclConfig action types

Back 56

Action Permit

Action Deny

Specific IP -RemoteSubnet "1.2.3.4/32"

Front 57

Retainsthe VIP of the Cloud Service when all VMsare stopped(Deallocated)

Back 57

New-AzureReservedIP

Front 58

Existing Cloud Service VIP can be reserved

Back 58

False

Front 59

Describe Availability Sets

Back 59

Avoids single pointof failure and physical downtime

At least 2 VMs to ensure 99.95% SLA

100 VMs per Set

Front 60

Describe Fault Domain (FD)

Back 60

A FaultDomain (FD) is essentially a rack of servers. It consumes subsystems likenetwork, power, cooling etc. So 2 VMs in the same availability set means Azurewill provision them in to 2 different racks so that if say, the network or thepower failed, only one rack would be affected.

VM FD 0,1,0,1,0,1 etc

Front 61

Describe Update Domains (UD)

Back 61

Protectagainst Host (not guest OS) updates

VMs placed in 5 of (UD 0,1,2,3,4.. repeated)

Front 62

VM Scaling: disks

Back 62

Scaling down - samenumber of data disks rule

Front 63

VM Scaling: In & Out

Back 63

VMs must be in sameAV set and be the same size (Standard_A1 etc.) or Autoscale wont work / be enabled

Front 64

Name the Autoscale schedules

Back 64

1. Different for: Day & Night

2. Different for Weekdays & Weekends

3. Set for Specific dates

Front 65

Where are the Autoscale logs found

Back 65

Azure >Management Services > Type = Autoscale

Front 66

VM Autoscale metrics

Back 66

1. None

2. CPU

3. Queue

Front 67

Disk caching defaults

Back 67

OS = ReadWrite

Data = None (off)

Front 68

OS & Data disk caching can be set while VM is running

Back 68

True

Front 69

Change OS disk caching

Back 69

Set-AzureOSDisk -HostCaching ReadOnly |

note - 'OSdisk'

Front 70

Change data disk caching

Back 70

Set-AzureDataDisk -LUN 0 -HostCaching ReadOnly

note - 'Datadisk'

Can do while VM running

Front 71

-HostCaching types (3)

Back 71

None

ReadWrite

ReadOnly

Front 72

Storage account IOPS max

Back 72

20,000

(500TB limit)

Front 73

Valid OS Caching types (2)

Back 73

ReadWrite

ReadOnly

Front 74

Valid Data caching types (3)

Back 74

None

ReadWrite

ReadOnly

Front 75

Name the Storage Replication types (4)

Back 75

LRS

ZRS

GRS

Read Access (RA-GRS)

Front 76

Describe LRS

Back 76

Locallyredundant storage (LRS) replicates your data within the same region in which you created your storage account. To maximize durability, everyrequest made against data in your storage account is replicated three times. These three replicas each reside inseparate fault domains and upgrade domains.

No. of copies =3

Front 77

Describe ZRS

Back 77

Zone-redundantstorage (ZRS) replicates your data acrosstwo to three facilities, either within a singleregion or across two regions, providing higherdurability than LRS.

ZRS iscurrently available only for block blobs.

No. of copies = 3

Front 78

Describe GRS

Back 78

Geo-redundant storage(GRS) replicates your data to a secondaryregion that is hundreds of miles awayfrom the primary region. If your storage account has GRS enabled, then yourdata is durable even in the case of a complete regional outage or a disaster inwhich the primary region is not recoverable. 3 times pri, 3 times secondary.

No. of copies = 6

Front 79

Describe RA-GRS

Back 79

Read-accessgeo-redundant storage (RA-GRS) maximizes availability for your storageaccount, by providing read-only access tothe data in the secondary location.

secondary endpoint is myaccount-secondary.blob.core.windows.net.

Front 80

Name two ways to improve Azure disk performance

Back 80

Add RAID0 (up to 16TB)

Create Storage Pool in Storage Spaces (256 KB)

More IOPS - more spindles (up to 16 disks)

Front 81

Limit per Storage Account IOPS

Back 81

20,000

Front 82

Describe Premium Storage

Back 82

Only Azure PAGE BLOBS - which are used to hold persistent disks for Azure Virtual Machines.

high-performance, low-latency disk support forI/O intensive workloads

Only for DS-series or GS-series of VMs.

6TB, 80,000 IOPS

Front 83

Requirements to setup Azure Files (SMB 2.1)

Back 83

1. Storage account NAME

Get-AzureStorageAccount (-Label)

2. Storage account primary KEY:

Get-AzureStorageKey-StorageAccountName

Front 84

VM monitoring metrics (5)

Back 84

CPU %

Disk Read

Disk Write

Network In

Network Out

Front 85

VM chart types (2)

Back 85

Bar

Line

Front 86

Support for Bitlocker

Back 86

Boot / OS volumes - no, needs 3rd party tool

Data disks - yes