Azure Interview Questions Part #7


Questions : 


Q #1 What all RBAC roles does ASR provide for the management.

Q #2 Can I use a guest OS server license on Azure?

Q #3 Pre-requisite of ASR on Azure ?

Q #4 What access to VMware VM’s does Site Recovery need ?

Q  #5  What are the components of ASR ?

Q #6 Is replication data sent to Site Recovery?

Q #7 What is mobility agent or service ?

Q #8 Where can I find the Mobility service installers?

Q #9 ASR replicated machine says unable to take app consistent snapshot hence health is critical 

Q #10 What happens when you hit enable replication on recovery service ?

Q #11 How do I install the Mobility service?

Q #12  what is asrseeddisk ?




************************Answers************************ 



Q #1 What all RBAC roles does ASR provide for the management.

ASR provides 3 basic roles to perform the various ASR related tasks ans these are :

Site Recovery Contributor -  This role has all permissions required to manage Azure Site Recovery operations in a Recovery Services vault. A user with this role, however, can't create or delete a Recovery Services vault or assign access rights to other users.
Site Recovery Operator - This role has permissions to execute and manage Failover and Failback operations. A user with this role can't enable or disable replication, create or delete vaults, register new infrastructure or assign access rights to other users.
Site Recovery Reader - This role has permissions to view all Site Recovery management operations. 




Q #2 Can I use a guest OS server license on Azure?

Yes, Microsoft Software Assurance customers can use Azure Hybrid Benefit to save on licensing costs for Windows Server machines that are migrated to Azure, or to use Azure for disaster recovery.


Q #3 Pre-requisite of ASR on Azure ?

Azure recovery vault - A vault holds metadata and configuration information for VMs, and other replication components.
Azure virtual network - When Azure VMs are created after failover, they're joined to this network.
Storage account - Holds the replication logs


Q #4 What access to VMware VM’s does Site Recovery need ?



  • To replicate , a VMware VM must have the site recovery Mobility service installed and running.
  • VM’s communicate with config server on HTTPS port 443 for replication management.
  • VM’s send replication data to the process server on HTTPS port 9443 (can be modified)
  • If you enable the multi-VM consistency , VM communicate with each other over port 2004.


Q  #5  What are the components of ASR ?

Configuration server
Process server
Mobility service 
Master Target Server


https://youtu.be/v3oGAgclojw


Q #6 Is replication data sent to Site Recovery?


No, Site Recovery doesn't intercept replicated data and doesn't have any information about what's running on your VMs. Replication data is exchanged between VMware hypervisors and Azure Storage. Site Recovery has no ability to intercept that data. Only the metadata needed to orchestrate replication and failover is sent to the Site Recovery service.



Q #7 What is mobility agent or service ?


Mobility agent is responsible for the data replication and needed to be installed on all the VM’s that you are protecting. Replication of data is block level and near continuous using Mobility service.
Mobility agent is pushed by the process server on VM’s you want to replicate.

Mobility agent coordinates communications between your protected machine, configuration server/scale-out process server and manages data replication. 


Q #8 Where can I find the Mobility service installers?


The installers are in the %ProgramData%\ASR\home\svsystems\pushinstallsvc\repository folder on the configuration server.

You can also download it from internet and install but to register you need config servers IP address and Passphrase


Q #9 ASR replicated machine says unable to take app consistent snapshot hence health is critical ?


Azure Site Recovery VSS provider is required on the source machine to generate application consistency points. If the installation of the provider didn't succeed through push installation, follow the below given guidelines to install it manually.
1.      Open admin cmd window.
2.      Navigate to the mobility service installation location. (Eg - C:\Program Files (x86)\Microsoft Azure Site Recovery\agent)
3.      Run the script InMageVSSProvider_Uninstall.cmd . This will uninstall the service if it already exists.

4.      Run the script InMageVSSProvider_Install.cmd to install the VSS provider manually.


Q #10 What happens when you hit enable replication on recovery service ?


Site Recovery will install the Mobility service when replication is enabled &  initial replication to Azure storage begins

Q #11 How do I install the Mobility service?

Push installation by Process server
Manuall installation by the installer on config server and registration required where we need to provide the config server IP address and passphrase.
Deploy by tool like SCCM


Q #12  what is asrseeddisk ?


It is prefix of Azure managed disk where recovery point created.
For every source disk, data is replicated to a managed disk in Azure. This disk has the prefix of asrseeddisk. It stores the copy of the source disk and all the recovery point snapshots.



3 comments:

  1. awesome blog and content is very useful to me, Thanks your efforts and keep it up :) Arun Pachehra ji.
    If possible try to make one post on what Azure Engineer can do in real-time daily rolls / responsibilities , it would be very helpful who is attending interviews like me..:)

    ReplyDelete

MS Defenders

 Microsoft Defender offers a wide range of security solutions, similar to the ones we've discussed (Defender for Containers, Defender fo...