Virtual machine options, and what a virtual machine needs

What a virtual machine drags along with it — a network, an interface and disks — which decisions can only be made at creation time, and how availability sets, scale sets and Azure Virtual Desktop each answer a different question.

Lesson 4 of 11 in objective architecture-and-services. Azure architecture and services, part of Microsoft Certified: Azure Fundamentals (AZ-900).

The two domains inside an availability set, and the different failure each one answers. Fault domain — What the members share: Power supply and network switch; The failure it answers: Something breaks unexpectedly; Where it operates: Inside one datacentre. Update domain — What the members share: A planned reboot batch; The failure it answers: Maintenance taking hosts down; Where it operates: Inside one datacentre Fault domain Update domain What the members share Power supply and network switch A planned reboot batch The failure it answers Something breaks unexpectedly Maintenance taking hosts down Where it operates Inside one datacentre Inside one datacentre
The two domains inside an availability set, and the different failure each one answers.

What every virtual machine comes with

Creating a virtual machine is a set of decisions rather than one: a region, a size (which fixes CPU, memory and disk throughput), an image, disks, and where it sits on the network. Three things always come with it. It needs a virtual network with a subnet to live in, a network interface attached to that subnet, and at least an operating system disk to boot from. Many sizes also present a temporary local disk whose contents do not survive a move to another host, so nothing you care about belongs on it.

A public IP address is optional, and often the wrong choice — plenty of machines are reachable only from inside the virtual network, over a VPN, or through a jump host, which is usually the safer design. A storage account is not required either: a managed disk is its own resource type and Azure looks after the storage behind it, so you choose the disk's type and size rather than an account to keep it in. That was the older unmanaged model, and it is still offered as a distractor.

az vm stop --name api-01 --resource-group paymentspowered off, but the hardware is still reservedthe compute charge is still runningaz vm deallocate --name api-01 --resource-group paymentsthe hardware is released and the compute charge stopsthe disks keep billing either way, because they still exist
Stopping a machine and releasing it are two different bills.

Scaling up and scaling out

Scaling up means a bigger machine. It requires a resize, usually with a restart, has a hard ceiling at the largest size available in the region, and leaves you paying peak prices around the clock unless somebody remembers to shrink it again. Scaling out means more machines, and it is where the cloud's economic advantage actually lives, because instances added for a busy hour can be removed afterwards.

Virtual Machine Scale Sets are the virtual machine expression of scaling out: identical instances built from one configuration, created and removed by autoscale rules against a metric such as CPU or by a schedule, load balanced across, and optionally spread across availability zones. The contrast the exam draws is with an availability set, which improves the availability of a FIXED number of machines and never changes the instance count in response to anything.

Availability sets, and the choice you cannot make later

An availability set is a placement instruction. Azure distributes its members across fault domains — groups of racks sharing power and a top-of-rack switch — so that one hardware failure cannot take every member, and across update domains, which are rebooted at different times during planned host maintenance so that one maintenance window cannot either. Both operate inside a single datacentre, which is precisely why availability zones are the next level up when the region offers them.

The detail that makes a question: joining an availability set is a creation-time decision. You cannot move an existing machine into one afterwards, so a scenario that describes a running cluster and asks how to add it to a set is asking you to notice that you cannot. The other creation-versus-runtime distinction worth carrying is billing: deallocating a machine stops the compute charge, while its disks keep billing for exactly as long as they exist.

Azure Virtual Desktop centralises the desktop, not the device

Azure Virtual Desktop delivers virtualised Windows desktops and applications from Azure: the session runs there, the data stays there, and the endpoint is reduced to a screen, a keyboard and a mouse. Windows multi-session lets several users share one host, which is what makes it economic for large numbers of people. When a requirement names the desktop itself, from unmanaged devices, with nothing stored locally, that is Virtual Desktop — not a pile of individually built virtual machines with remote desktop exposed to the internet.

Worth carrying in

Virtual machine size
Fixes CPU, memory and disk throughput. Availability varies by region.
Managed disk
A disk as its own resource. No storage account for you to create or manage.
Network interface
How a machine attaches to a subnet. Carries its private IP.
Public IP address
Optional, and separately billed. A machine works perfectly well without one.
Availability set
Spreads members across fault and update domains. Chosen at creation only.
Fault domain
Shared power and top-of-rack network. Protects against something breaking.
Update domain
A planned reboot batch. Protects against maintenance taking everything at once.
Virtual Machine Scale Set
Identical instances from one configuration, added and removed by rule.
Azure Virtual Desktop
Windows desktops and applications delivered from Azure, with multi-session hosts.
Deallocate
Release the hardware and stop the compute charge. Disks bill on regardless.

What the exam does with this

Objective
architecture-and-services. Azure architecture and services
Share of the exam
38.46% (the whole objective)
Questions in this lesson
4
Signed for by a person
0

Partly checked. None of the 4 questions here has been read against the cited source by a person. 4 questions have been checked against their cited clause by an automated pass — which is not the same thing, and is not a signature.

Only questions a person has signed for are used in mock exams here. That is the whole difference between the two kinds of checking above.

Questions in this lesson

Drill this lesson

A lesson is one sitting: the trainer draws a short run from these questions alone and spaces the ones you get wrong.

Practise Virtual machine options, and what a virtual machine needs

The rest of objective architecture-and-services