Virtual machine options, and what a virtual machine needs
What a virtual machine drags along with it — a network, an interface and disks — which decisions can only be made at creation time, and how availability sets, scale sets and Azure Virtual Desktop each answer a different question.
Lesson 4 of 11 in objective architecture-and-services. Azure architecture and services, part of Microsoft Certified: Azure Fundamentals (AZ-900).
What every virtual machine comes with
Creating a virtual machine is a set of decisions rather than one: a region, a size (which fixes CPU, memory and disk throughput), an image, disks, and where it sits on the network. Three things always come with it. It needs a virtual network with a subnet to live in, a network interface attached to that subnet, and at least an operating system disk to boot from. Many sizes also present a temporary local disk whose contents do not survive a move to another host, so nothing you care about belongs on it.
A public IP address is optional, and often the wrong choice — plenty of machines are reachable only from inside the virtual network, over a VPN, or through a jump host, which is usually the safer design. A storage account is not required either: a managed disk is its own resource type and Azure looks after the storage behind it, so you choose the disk's type and size rather than an account to keep it in. That was the older unmanaged model, and it is still offered as a distractor.
az vm stop --name api-01 --resource-group paymentspowered off, but the hardware is still reservedthe compute charge is still runningaz vm deallocate --name api-01 --resource-group paymentsthe hardware is released and the compute charge stopsthe disks keep billing either way, because they still exist
Scaling up and scaling out
Scaling up means a bigger machine. It requires a resize, usually with a restart, has a hard ceiling at the largest size available in the region, and leaves you paying peak prices around the clock unless somebody remembers to shrink it again. Scaling out means more machines, and it is where the cloud's economic advantage actually lives, because instances added for a busy hour can be removed afterwards.
Virtual Machine Scale Sets are the virtual machine expression of scaling out: identical instances built from one configuration, created and removed by autoscale rules against a metric such as CPU or by a schedule, load balanced across, and optionally spread across availability zones. The contrast the exam draws is with an availability set, which improves the availability of a FIXED number of machines and never changes the instance count in response to anything.
Availability sets, and the choice you cannot make later
An availability set is a placement instruction. Azure distributes its members across fault domains — groups of racks sharing power and a top-of-rack switch — so that one hardware failure cannot take every member, and across update domains, which are rebooted at different times during planned host maintenance so that one maintenance window cannot either. Both operate inside a single datacentre, which is precisely why availability zones are the next level up when the region offers them.
The detail that makes a question: joining an availability set is a creation-time decision. You cannot move an existing machine into one afterwards, so a scenario that describes a running cluster and asks how to add it to a set is asking you to notice that you cannot. The other creation-versus-runtime distinction worth carrying is billing: deallocating a machine stops the compute charge, while its disks keep billing for exactly as long as they exist.
Azure Virtual Desktop centralises the desktop, not the device
Azure Virtual Desktop delivers virtualised Windows desktops and applications from Azure: the session runs there, the data stays there, and the endpoint is reduced to a screen, a keyboard and a mouse. Windows multi-session lets several users share one host, which is what makes it economic for large numbers of people. When a requirement names the desktop itself, from unmanaged devices, with nothing stored locally, that is Virtual Desktop — not a pile of individually built virtual machines with remote desktop exposed to the internet.
Worth carrying in
- Virtual machine size
- Fixes CPU, memory and disk throughput. Availability varies by region.
- Managed disk
- A disk as its own resource. No storage account for you to create or manage.
- Network interface
- How a machine attaches to a subnet. Carries its private IP.
- Public IP address
- Optional, and separately billed. A machine works perfectly well without one.
- Availability set
- Spreads members across fault and update domains. Chosen at creation only.
- Fault domain
- Shared power and top-of-rack network. Protects against something breaking.
- Update domain
- A planned reboot batch. Protects against maintenance taking everything at once.
- Virtual Machine Scale Set
- Identical instances from one configuration, added and removed by rule.
- Azure Virtual Desktop
- Windows desktops and applications delivered from Azure, with multi-session hosts.
- Deallocate
- Release the hardware and stop the compute charge. Disks bill on regardless.
What the exam does with this
- Availability set membership is chosen when the machine is created. A question about adding an existing machine to one has already given you the answer.
- Deallocated stops the compute charge; stopped from inside the guest does not. The disks bill either way, which is the second half of the same question.
- A scale set changes the number of instances; an availability set never does. Both are offered whenever the stem mentions traffic that rises and falls.
- Fault domain against update domain: something breaking, against something being updated. Both operate inside one datacentre — that is why zones exist above them.
- A public IP is optional. A virtual network, a network interface and an operating system disk are not, and a storage account for managed disks is not a thing you create.
- Objective
- architecture-and-services. Azure architecture and services
- Share of the exam
- 38.46% (the whole objective)
- Questions in this lesson
- 4
- Signed for by a person
- 0
Partly checked. None of the 4 questions here has been read against the cited source by a person. 4 questions have been checked against their cited clause by an automated pass — which is not the same thing, and is not a signature.
Only questions a person has signed for are used in mock exams here. That is the whole difference between the two kinds of checking above.
Questions in this lesson
- A public website runs on four identical virtual machines behind a load balancer. Traffic triples while a television advert airs and falls back an hour later. The team wants instances added and removed automatically against CPU, all built from one image, with nobody clicking. Which option is designed for that? machine-checked
- Three virtual machines form a quorum-based cluster in a region that has no availability zones. You want them placed so that neither a single rack losing power nor a single batch of planned host maintenance can take all three at once. What do you configure? machine-checked
- You are creating your first Azure virtual machine and want to know what it genuinely requires alongside it. Which statement is correct? machine-checked
- Two hundred seasonal contractors need a standard Windows desktop with the company's line-of-business applications, reached from their own unmanaged laptops, for four months. IT insists no company data ends up on those laptops. Which Azure service is built for this? machine-checked
Drill this lesson
A lesson is one sitting: the trainer draws a short run from these questions alone and spaces the ones you get wrong.
Practise Virtual machine options, and what a virtual machine needs
The rest of objective architecture-and-services
- Regions, region pairs, availability zones and datacentres
- Resources, resource groups, subscriptions and management groups
- Virtual machines, containers and functions compared
- Virtual machine options, and what a virtual machine needs — you are here
- Hosting an application: web apps, containers and virtual machines
- Virtual networks, subnets, peering and Azure DNS
- Reaching Azure privately: VPN Gateway, ExpressRoute and endpoints
- Storage accounts, storage services, tiers and redundancy
- Moving files and migrating workloads into Azure
- Microsoft Entra ID, authentication and role-based access control
- Zero Trust, defence in depth and Defender for Cloud