HOTSPOT -
You plan to create a virtual machine as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
Box 1: is guaranteed to remain the same
OS disk type: Premium SSD -
Premium SSD Managed Disks are high performance Solid State Drive (SSD) based Storage designed to support I/O intensive workloads with significantly high throughput and low latency. With Premium SSD Managed Disks, you can provision a persistent disk and configure its size and performance characteristics.
Box 2: secure enclaves -
Virtual machine size: Standard_DC2s
DC-series virtual machines are a new family of VMs to protect the confidentiality and integrity of your data and code while it's processed in Azure through the use of secure enclaves.
Incorrect:
Not dm-crypt: Azure Disk Encryption helps protect and safeguard your data to meet your organizational security and compliance commitments. It uses the
BitLocker feature of Windows and the DM-Crypt feature of Linux to provide volume encryption for the OS and data disks of Azure virtual machines (VMs).
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disks-types https://azure.microsoft.com/en-us/pricing/details/virtual-machines/series/
Correct
So i think the answer is correct as it takes about data protection
Secure Enclave is correct for the second question. https://docs.microsoft.com/en-us/azure/virtual-machines/dcv2-series
Answer is correct Premiun SSD so performance is guaranteed to remain Windows OS so dm-crypt and SSH are wrong for sure as they are for Linux
wrong, enclaves are only working on Gen2, not v1
then what is the answer?
second question is strange but enclaves seems to be most probable answer https://docs.microsoft.com/en-us/azure/confidential-computing/confidential-computing-enclaves
second question is strange but enclaves seems to be most probable answer https://docs.microsoft.com/en-us/azure/confidential-computing/confidential-computing-enclaves
Read please: https://docs.microsoft.com/en-us/azure/virtual-machines/dcv2-series#:~:text=with%20the%20intel%20turbo%20boost%20technology%20these%20machines%20can%20go%20up%20to%205.0ghz.%20dcsv2%20series%20instances%20enable%20customers%20to%20build%20secure%20enclave-based%20applications%20to%20protect%20their%20code%20and%20data%20while%20it%E2%80%99s%20in%20use. The question's exhibit is showing the Virtual Machine Size: Standard_DC2s.
Standard_DC2s is v1 https://docs.microsoft.com/en-us/azure/virtual-machines/sizes-previous-gen#preview-dc-series but your link is Standard_DC2s_v2
"DC-series VMs are generation 2 VMs" https://docs.microsoft.com/en-us/azure/virtual-machines/sizes-previous-gen
"DC-series VMs are generation 2 VMs" https://docs.microsoft.com/en-us/azure/virtual-machines/sizes-previous-gen
Standard_DC2s is v1 https://docs.microsoft.com/en-us/azure/virtual-machines/sizes-previous-gen#preview-dc-series but your link is Standard_DC2s_v2
"DC-series VMs are generation 2 VMs" https://docs.microsoft.com/en-us/azure/virtual-machines/sizes-previous-gen
"DC-series VMs are generation 2 VMs" https://docs.microsoft.com/en-us/azure/virtual-machines/sizes-previous-gen
Generation <> Version. "Standard_DC2s" is version 1 of the VM size, but still it's a Generation 2 VM.
Azure Disk Encryption is a new capability for encrypting your Windows and Linux virtual machine disks. Azure Disk Encryption uses the industry-standard BitLocker feature of Windows and the dm-crypt feature of Linux to provide volume encryption for the OS and the data disks.
2nd answer is dm-crypt. its not secure encrypt. SE wasnt supported until the newer version of dcv2-series came out. see https://docs.microsoft.com/en-us/azure/virtual-machines/linux/disk-encryption-overview#supported-vms-and-operating-systems
That link is about Linux, but this VM is running Windows.
The enclaves require special SDK and can be used to protect things like passwords etc. it is not used at infrastructure level. However dm-crypt encrypts at the disk level and I believe that is the answer here. https://docs.microsoft.com/en-us/azure/confidential-computing/application-development
Can ONLY be secure enclaves because DM-CRYPT and SSH is for Linux!