Deploy and Manage a Cloud Virtual Machine
Virtual machines are one of the fundamental building blocks of cloud computing. A cloud engineer must understand not only how to launch a VM, but how compute, storage, networking, identity, security, monitoring, cost, and lifecycle management work together around that workload.
Welcome to Lab 02 of the CompTIA Cloud+ practical lab sequence.
In Lab 01, you established your cloud lab environment.
You defined:
- account security
- MFA
- primary region
- naming standards
- tagging standards
- cost controls
- documentation
- cleanup procedures
Now you will deploy your first actual cloud workload.
You will follow the lifecycle:
Requirement βSelect Compute βSelect Operating System βConfigure Storage βConfigure Network βConfigure Security βDeploy βConnect βMonitor βModify βTroubleshoot βClean UpThe objective is not simply:
Launch a virtual machine.
The objective is:
Understand how a cloud engineer deploys, validates, operates, troubleshoots, and manages the complete lifecycle of a virtual machine.
π― Mission Information
Section titled βπ― Mission Informationβ| Item | Details |
|---|---|
| Lab | 02 β Deploy and Manage a Cloud Virtual Machine |
| Difficulty | Beginner |
| Estimated Time | 60β90 Minutes |
| Certification Alignment | CompTIA Cloud+ |
| Primary Focus | Cloud Compute |
| Environment | Approved Cloud Lab |
| Previous Lab | 01 β Build Your Cloud Lab Environment |
| Major Skills | Compute, Storage, Networking, Security, Monitoring, Troubleshooting |
| Career Alignment | Cloud Support Engineer, Cloud Administrator, Junior Cloud Engineer |
| Deliverable | Working VM + Deployment Documentation |
π’ Scenario
Section titled βπ’ ScenarioβYou are working as a junior cloud administrator.
A development team requires a small Linux server for testing an internal application.
The server does not require high performance.
Your manager asks you to:
-
deploy the virtual machine
-
use an appropriately sized instance
-
attach persistent storage
-
configure network connectivity
-
restrict administrative access
-
validate connectivity
-
monitor the workload
-
resize the VM
-
document the deployment
-
remove the resources when testing is complete
You must also ensure the environment remains:
-
secure
-
documented
-
cost-aware
-
easy to troubleshoot
π― Lab Objectives
Section titled βπ― Lab ObjectivesβBy completing this lab, you should be able to:
-
explain cloud virtual machines
-
understand virtualization concepts
-
identify VM configuration components
-
select an appropriate machine size
-
select an operating-system image
-
configure virtual storage
-
understand virtual network interfaces
-
distinguish private and public IP addresses
-
configure basic network access
-
deploy a VM
-
connect securely to a VM
-
inspect VM resources
-
start and stop a VM
-
resize a VM
-
review basic monitoring
-
troubleshoot common VM connectivity problems
-
document the deployment
-
safely remove cloud resources
π§ Before You Begin
Section titled βπ§ Before You BeginβYou should have completed:
Lab 01 β Build Your Cloud Lab Environment
You should already have:
Cloud Account βSecure Administrative Access βPrimary Lab Region βNaming Standard βTagging Standard βCost Controls βCleanup Processβ οΈ Cost Notice
Section titled ββ οΈ Cost NoticeβVirtual machines may generate cloud charges.
For this lab:
-
select a free-tier or smallest practical instance where available
-
avoid GPU instances
-
avoid high-memory instances
-
avoid large storage volumes
-
stop or delete resources after completing the exercise
-
verify associated resources during cleanup
Remember:
VM Deletedβ Everything Automatically FreeStorage, snapshots, IP addresses, backups, and other associated resources may have separate lifecycle or billing behavior.
01 β Understand What You Are Building
Section titled β01 β Understand What You Are BuildingβA cloud VM is essentially:
Physical Infrastructure βVirtualization Platform βVirtual Machine βOperating System βApplicationsFrom your perspective, the VM normally contains:
Virtual Machine | βββ vCPU βββ Memory βββ Operating System βββ Virtual Disk βββ Network Interface βββ IP Addressπ§ What Is a vCPU?
Section titled βπ§ What Is a vCPU?βA virtual CPU represents compute capacity assigned to the VM.
Increasing vCPU can provide more processing capability.
But:
More CPU usually means higher cost.
Cloud engineering therefore requires:
Performance+Requirement+Costrather than simply choosing the largest VM available.
02 β Understand VM Sizing
Section titled β02 β Understand VM SizingβCloud providers normally provide multiple VM sizes.
They may be optimized for:
-
general purpose
-
compute
-
memory
-
storage
-
graphics
-
accelerated workloads
For this lab, choose:
the smallest practical general-purpose VM.
π§ Right-Sizing Principle
Section titled βπ§ Right-Sizing PrincipleβAvoid:
Small Application βVery Large VM βUnused Capacity βHigher CostPrefer:
Application Requirement βAppropriate VM Size βMonitor βResize When Required03 β Record the Workload Requirements
Section titled β03 β Record the Workload RequirementsβBefore deploying anything, document:
Application:Cloud+ Test Workload
Environment:Lab
Operating System:Linux
Expected Users:1
Performance Requirement:Low
Availability Requirement:Lab Only
Internet Exposure:Administrative Access Only
Data Sensitivity:None / Lab Dataπ‘ Job Tip
Section titled βπ‘ Job TipβIn a real environment, do not begin with:
Which VM should I create?
Begin with:
What does the workload actually require?
04 β Open the Cloud Compute Service
Section titled β04 β Open the Cloud Compute ServiceβSign in using your approved lab administrative identity.
Navigate to the providerβs compute or virtual-machine service.
Depending on the platform, terminology may include concepts such as:
-
virtual machine
-
instance
-
compute instance
Do not deploy yet.
First review the available configuration options.
05 β Verify the Cloud Account
Section titled β05 β Verify the Cloud AccountβBefore creating anything, verify:
Correct Account? βCorrect Subscription / Project? βCorrect Environment?Accidentally deploying resources into the wrong environment is a common operational problem.
06 β Verify Your Region
Section titled β06 β Verify Your RegionβConfirm that you are operating in the region selected during Lab 01.
Record:
Cloud Provider:
Account / Subscription:
Region:
Environment:LABπ§ Why Region Matters
Section titled βπ§ Why Region MattersβYour VMβs location can affect:
-
latency
-
availability
-
pricing
-
service compatibility
-
compliance
-
data residency
07 β Name the Virtual Machine
Section titled β07 β Name the Virtual MachineβFollow the naming standard established during Lab 01.
Example:
cloudplus-lab-vm-01Avoid names such as:
server1testvmnewabc08 β Apply Resource Tags
Section titled β08 β Apply Resource TagsβApply your standard lab tags.
Example:
| Tag | Value |
|---|---|
| Environment | Lab |
| Course | CompTIA-CloudPlus |
| Purpose | Training |
| Owner | Student |
| AutoDelete | Yes |
π§ Professional Habit
Section titled βπ§ Professional HabitβEvery resource should answer:
What is this?
Who owns it?
Why does it exist?
09 β Select an Operating-System Image
Section titled β09 β Select an Operating-System ImageβChoose a supported Linux image suitable for a basic lab.
For example, use a current provider-supported Linux distribution.
Do not select an operating system simply because:
it is the first option.
Review:
-
OS family
-
version
-
architecture
-
support status
-
cost
π§ What Is a VM Image?
Section titled βπ§ What Is a VM Image?βA VM image provides the starting operating-system configuration.
Conceptually:
VM Image βOperating System Template βNew Virtual Machine10 β Understand Image Architecture
Section titled β10 β Understand Image ArchitectureβYou may encounter processor architectures such as:
x86_64or:
ARM64Software compatibility may depend on architecture.
For beginner labs, choose the architecture that provides the simplest compatibility with your selected workload.
11 β Select the VM Size
Section titled β11 β Select the VM SizeβChoose a small general-purpose VM.
Record:
VM Size:
vCPU:
Memory:
Estimated Cost:π§ Cloud+ Exam Concept
Section titled βπ§ Cloud+ Exam ConceptβVM sizing is not simply about:
CPU.
Consider:
CPU+Memory+Storage+Network+Workload Type+Cost12 β Configure the Boot Disk
Section titled β12 β Configure the Boot DiskβThe operating system requires storage.
Conceptually:
Virtual Machine βBoot Volume βOperating SystemChoose the smallest practical storage size for the lab.
13 β Understand Cloud Block Storage
Section titled β13 β Understand Cloud Block StorageβA VM commonly uses block storage.
Think of it as:
a virtual disk attached to the virtual machine.
Examples of workloads suited to block storage include:
-
operating-system disks
-
application disks
-
database volumes
π§ Important Distinction
Section titled βπ§ Important DistinctionβLater you will compare:
Block StorageFile StorageObject StorageDo not treat all cloud storage as the same technology.
14 β Review Storage Performance Options
Section titled β14 β Review Storage Performance OptionsβYour provider may expose characteristics such as:
-
disk type
-
IOPS
-
throughput
-
capacity
For this lab:
use the standard low-cost/default option appropriate for training.
Do not increase performance settings unnecessarily.
15 β Configure the Network Interface
Section titled β15 β Configure the Network InterfaceβYour VM requires a virtual network interface.
Conceptually:
Virtual Machine βVirtual Network Interface βVirtual Network βSubnetThe network interface may contain:
-
private IP
-
public IP
-
security rules
-
routing information
16 β Understand the Private IP Address
Section titled β16 β Understand the Private IP AddressβA private IP is typically used for communication inside private network environments.
Example concept:
VM-A10.0.1.10 βPrivate Network βVM-B10.0.1.2017 β Understand the Public IP Address
Section titled β17 β Understand the Public IP AddressβA public IP may allow communication from external networks when routing and security controls permit it.
Conceptually:
Internet βPublic IP βCloud VMπ¨ Important
Section titled βπ¨ ImportantβA public IP does not automatically mean:
every service is accessible.
Access also depends on:
Route+Network Security Rules+Operating-System Firewall+Running Service18 β Decide Whether Public Access Is Required
Section titled β18 β Decide Whether Public Access Is RequiredβFor this beginner lab, you may require temporary administrative access.
If a public IP is necessary:
-
use it only for the lab
-
restrict inbound administrative access
-
remove unnecessary exposure afterward
π§ Security Principle
Section titled βπ§ Security PrincipleβDo not ask:
Can I make this server public?
Ask:
Does this workload actually need to be public?
19 β Configure Administrative Access
Section titled β19 β Configure Administrative AccessβFor Linux, secure remote administration commonly uses:
SSHDefault SSH port:
TCP 22Where possible, prefer key-based authentication rather than weak reusable passwords.
20 β Create or Select an SSH Key
Section titled β20 β Create or Select an SSH KeyβWhere required, create or select an SSH key pair.
Conceptually:
Private Key βKept Securely by Administrator
Public Key βPlaced on VMπ¨ Never
Section titled βπ¨ Neverβ-
publish private keys
-
upload them to public repositories
-
share them unnecessarily
-
paste them into screenshots
21 β Configure the Network Security Rule
Section titled β21 β Configure the Network Security RuleβAllow only the access required for administration.
For example:
Source:Your Trusted IP
Protocol:TCP
Destination Port:22
Action:AllowAvoid:
Source:Anywhere
Port:22where a more restrictive rule is practical.
π§ Least-Privilege Networking
Section titled βπ§ Least-Privilege NetworkingβUse:
Required Source βRequired Protocol βRequired Port βRequired Destination22 β Review the Configuration Before Deployment
Section titled β22 β Review the Configuration Before DeploymentβBefore selecting Create, Launch, or equivalent, review:
AccountRegionNameImageVM SizeStorageNetworkIP AddressSecurity RulesAuthenticationTagsEstimated Costπ§ Professional Habit
Section titled βπ§ Professional HabitβUse:
Review βDeploynot:
Deploy βDiscover Mistakes23 β Deploy the Virtual Machine
Section titled β23 β Deploy the Virtual MachineβCreate the VM.
Observe the deployment process.
You may see states such as:
Creating βProvisioning βRunningπ Record Deployment Evidence
Section titled βπ Record Deployment EvidenceβDocument:
VM Name:
Region:
VM Size:
Operating System:
Private IP:
Public IP:
Boot Disk:
Deployment Status:24 β Inspect the VM Details
Section titled β24 β Inspect the VM DetailsβOpen the VM details page.
Identify:
-
VM identifier
-
power state
-
region
-
zone/failure domain
-
image
-
VM size
-
network interface
-
private IP
-
public IP
-
attached storage
π§ Cloud Administrator Habit
Section titled βπ§ Cloud Administrator HabitβWhen troubleshooting a VM, first understand:
what is actually deployed.
25 β Connect to the VM
Section titled β25 β Connect to the VMβUse the secure connection method provided by your environment.
For a Linux SSH connection, the conceptual syntax is:
ssh -i <private-key> <username>@<public-ip>Use the username and authentication method appropriate for your selected image.
26 β Validate the Operating System
Section titled β26 β Validate the Operating SystemβAfter connecting, identify the OS.
Example:
cat /etc/os-releaseRecord:
Operating System:
Version:
Architecture:27 β Check the Hostname
Section titled β27 β Check the HostnameβRun:
hostnameUnderstand the difference between:
cloud resource name
and:
operating-system hostname.
They may not always be identical.
28 β Check CPU Information
Section titled β28 β Check CPU InformationβRun:
lscpuIdentify:
-
architecture
-
CPU count
Compare this with the VM size you selected.
29 β Check Memory
Section titled β29 β Check MemoryβRun:
free -hReview:
-
total memory
-
used memory
-
available memory
π§ Troubleshooting Connection
Section titled βπ§ Troubleshooting ConnectionβIf an application becomes slow, memory utilization may be one possible factor.
Never troubleshoot only:
the network.
30 β Check Storage
Section titled β30 β Check StorageβRun:
lsblkThen:
df -hUnderstand the difference between:
-
block devices
-
mounted filesystems
-
available filesystem capacity
31 β Check Network Interfaces
Section titled β31 β Check Network InterfacesβRun:
ip addrIdentify the VMβs private IP address.
Compare it with the value shown in the cloud console.
π§ Important Observation
Section titled βπ§ Important ObservationβThe VM operating system may primarily see:
Private IPwhile the cloud platform provides public-IP translation or mapping externally.
This distinction becomes important during network troubleshooting.
32 β Review the Routing Table
Section titled β32 β Review the Routing TableβRun:
ip routeIdentify:
-
default route
-
local network route
-
gateway
π§ Network Troubleshooting Model
Section titled βπ§ Network Troubleshooting ModelβRemember:
Source βNetwork Interface βRoute βSecurity Control βDestination33 β Test Basic Connectivity
Section titled β33 β Test Basic ConnectivityβWhere appropriate, test network connectivity to an approved destination.
For example:
ping -c 4 <approved-destination>Do not assume a failed ping automatically means:
the network is broken.
ICMP may be blocked while other services remain available.
34 β Update the Operating System
Section titled β34 β Update the Operating SystemβWhere appropriate for your chosen distribution and lab environment, apply current package updates using its supported package-management process.
Examples may include:
sudo apt updateor:
sudo dnf check-updateUse the correct command for your distribution.
π§ Cloud Operations Principle
Section titled βπ§ Cloud Operations PrincipleβA newly deployed VM is not automatically:
permanently secure.
Operating systems require lifecycle management.
35 β Review Running Processes
Section titled β35 β Review Running ProcessesβRun:
ps auxObserve:
-
system processes
-
services
-
resource consumers
You do not need to understand every process yet.
The goal is becoming comfortable operating a Linux cloud workload.
36 β Review Listening Ports
Section titled β36 β Review Listening PortsβUse an available tool such as:
ss -tulnIdentify listening services.
Ask:
Does every listening service actually need to be available?
π§ Security Connection
Section titled βπ§ Security ConnectionβSecurity should be evaluated at multiple layers:
Cloud Network Rule +OS Firewall +Application37 β Create a Test File
Section titled β37 β Create a Test FileβCreate simple evidence that you have administrative access.
Example:
echo "CompTIA Cloud+ Lab 02" > ~/cloudplus-lab.txtVerify:
cat ~/cloudplus-lab.txt38 β Review VM Monitoring
Section titled β38 β Review VM MonitoringβReturn to your cloud console.
Locate the VM monitoring or metrics section.
Review available metrics such as:
-
CPU utilization
-
network activity
-
disk activity
-
VM health
π§ Monitoring Principle
Section titled βπ§ Monitoring PrincipleβDo not wait for users to report:
the server is slow.
Monitoring should help detect operational conditions proactively.
39 β Generate Basic Activity
Section titled β39 β Generate Basic ActivityβReconnect to the VM and perform some basic operations.
Then review whether the cloud metrics change.
The objective is to connect:
Workload Activity βTelemetry βMonitoring40 β Stop the Virtual Machine
Section titled β40 β Stop the Virtual MachineβGracefully stop the VM using the providerβs supported method.
Observe the state transition.
For example:
Running βStopping βStoppedπ§ Stop vs Delete
Section titled βπ§ Stop vs DeleteβUnderstand:
STOP=VM retained
DELETE=VM resource removedBut billing behavior depends on the provider and associated resources.
41 β Start the Virtual Machine
Section titled β41 β Start the Virtual MachineβStart the VM again.
Observe:
Stopped βStarting βRunningThen reconnect.
42 β Check the IP Addresses Again
Section titled β42 β Check the IP Addresses AgainβCompare:
Before StopvsAfter StartDetermine whether:
-
private IP remained the same
-
public IP remained the same
π§ Important Cloud Concept
Section titled βπ§ Important Cloud ConceptβDepending on configuration:
public addresses may change across lifecycle operations.
Applications should therefore not blindly depend on temporary addressing.
43 β Resize the Virtual Machine
Section titled β43 β Resize the Virtual MachineβYou will now practice vertical scaling.
Record the current configuration:
Current vCPU:
Current Memory:
Current VM Size:Select another small VM size.
Do not select an expensive configuration.
π§ Vertical Scaling
Section titled βπ§ Vertical ScalingβVertical scaling means:
VM βMore / Less CPUMore / Less MemoryThis is also called:
scaling up or scaling down.
44 β Perform the Resize
Section titled β44 β Perform the ResizeβDepending on the provider, resizing may require:
-
stopping the VM
-
selecting a new size
-
restarting the VM
Follow your providerβs supported workflow.
45 β Validate the New Configuration
Section titled β45 β Validate the New ConfigurationβReconnect and run:
lscpuand:
free -hCompare the results with your previous values.
π Record
Section titled βπ Recordβ| Resource | Before | After |
|---|---|---|
| vCPU | ||
| Memory | ||
| VM Size |
π§ Operational Lesson
Section titled βπ§ Operational LessonβDo not resize workloads blindly.
Use:
Monitoring βPerformance Requirement βCapacity Decision βResize βValidation46 β Understand Horizontal Scaling
Section titled β46 β Understand Horizontal ScalingβYou did vertical scaling in this lab.
Horizontal scaling is different.
Vertical Scaling
VM βBigger VMversus:
Horizontal Scaling
VM βVM + VM + VMHorizontal scaling will become important later when you work with:
-
load balancing
-
auto scaling
-
high availability
47 β Simulate VM Connectivity Failure
Section titled β47 β Simulate VM Connectivity FailureβNow practice troubleshooting.
Temporarily modify your labβs administrative network rule so your SSH connection is no longer allowed.
Do not delete the VM.
Attempt to reconnect.
Expected result:
connection should fail.
48 β Troubleshoot Systematically
Section titled β48 β Troubleshoot SystematicallyβDo not immediately rebuild the VM.
Use:
Is VM Running? βCorrect IP? βCorrect Route? βSecurity Rule? βOS Firewall? βSSH Service? βCredentials?π§ Troubleshooting Rule
Section titled βπ§ Troubleshooting RuleβStart with:
evidence.
Not:
assumptions.
49 β Restore the Security Rule
Section titled β49 β Restore the Security RuleβRestore the authorized SSH rule.
Attempt the connection again.
Confirm:
connectivity is restored.
π Document the Incident
Section titled βπ Document the IncidentβRecord:
Problem:Unable to connect to VM using SSH.
Observation:
Root Cause:
Corrective Action:
Validation:
Lesson Learned:50 β Understand the VM Connectivity Path
Section titled β50 β Understand the VM Connectivity PathβYour connection conceptually follows:
Administrator βInternet βPublic IP βCloud Network βSecurity Rule βNetwork Interface βOperating System βSSH ServiceAny component in that path can cause failure.
51 β Perform a Basic Security Review
Section titled β51 β Perform a Basic Security ReviewβCheck:
[ ] Administrative access restricted[ ] No unnecessary ports exposed[ ] Authentication protected[ ] OS updated where appropriate[ ] Resource tagged[ ] Correct region used[ ] Correct VM size used[ ] Monitoring available52 β Perform a Basic Cost Review
Section titled β52 β Perform a Basic Cost ReviewβAsk:
-
Is the VM larger than required?
-
Is it still running unnecessarily?
-
Is extra storage attached?
-
Is a public IP allocated?
-
Are any other billable resources attached?
π‘ Job Tip
Section titled βπ‘ Job TipβCloud optimization often means:
security + performance + cost.
Not just:
reduce the bill.
53 β Update Your Resource Inventory
Section titled β53 β Update Your Resource InventoryβAdd the VM to your Lab 01 inventory.
Example:
| Resource | Type | Region | Purpose | Cost Risk | Cleanup Status |
|---|---|---|---|---|---|
| cloudplus-lab-vm-01 | VM | Primary Lab Region | Training | Low | Active |
Also record associated:
-
disk
-
network interface
-
public IP
where applicable.
54 β Create the Architecture Diagram
Section titled β54 β Create the Architecture DiagramβDocument your deployment.
Administrator | | SSH vInternet | vPublic IP | vCloud Network | vSecurity Rule | vNetwork Interface | vcloudplus-lab-vm-01 | βββ vCPU βββ Memory βββ Linux βββ Boot Disk55 β Capture Lab Evidence
Section titled β55 β Capture Lab EvidenceβCapture sanitized evidence of:
-
VM configuration
-
running state
-
CPU information
-
memory information
-
storage
-
private IP
-
monitoring metrics
-
resize results
π¨ Never Capture
Section titled βπ¨ Never CaptureβDo not include:
-
passwords
-
private SSH keys
-
access tokens
-
secrets
-
sensitive account information
56 β Create Your VM Deployment Record
Section titled β56 β Create Your VM Deployment RecordβDocument:
VM Name:
Purpose:
Provider:
Region:
OS:
Architecture:
VM Size:
vCPU:
Memory:
Boot Disk:
Private IP:
Public IP:
Authentication:
Administrative Port:
Security Rule:
Tags:
Monitoring:
Estimated Cost:
Cleanup Required:57 β Perform Final Validation
Section titled β57 β Perform Final ValidationβVerify:
VM Deploys βVM Boots βNetwork Works βAuthentication Works βStorage Works βMonitoring Works βResize Works βTroubleshooting Process Worksπ§ͺ Validation Checklist
Section titled βπ§ͺ Validation Checklistβ| Validation | Status |
|---|---|
| VM successfully deployed | |
| Correct region selected | |
| Naming standard followed | |
| Tags applied | |
| Small VM size selected | |
| OS identified | |
| Storage identified | |
| Private IP identified | |
| Public access reviewed | |
| SSH restricted | |
| VM successfully accessed | |
| CPU inspected | |
| Memory inspected | |
| Storage inspected | |
| Routes inspected | |
| Monitoring reviewed | |
| VM stopped successfully | |
| VM restarted successfully | |
| VM resized | |
| Resize validated | |
| Connectivity failure tested | |
| Root cause identified | |
| Documentation completed |
58 β Clean Up the Lab
Section titled β58 β Clean Up the LabβIf you are not immediately continuing to the next lab, remove unnecessary resources.
Review:
VM βAttached Storage βNetwork Interface βPublic IP βSecurity Rules βSnapshots / Backupsπ¨ Do Not Blindly Delete Shared Resources
Section titled βπ¨ Do Not Blindly Delete Shared ResourcesβIf you are reusing the same network or security resources for later labs, retain only what is intentionally required.
59 β Verify Resource Deletion
Section titled β59 β Verify Resource DeletionβAfter cleanup:
-
refresh the compute inventory
-
review storage
-
review public IPs
-
review networking resources
-
review billing/cost dashboard
Update:
Cleanup Status:Completeπ§ Certification Connection
Section titled βπ§ Certification ConnectionβCloud+ questions may present scenarios such as:
A VM is running but cannot be accessed.
Do not automatically choose:
restart the VM.
Think systematically:
Power State βIP Address βRouting βNetwork Security βOS Firewall βService βAuthenticationπ€ Interview Questions
Section titled βπ€ Interview QuestionsβPractice answering these without notes.
1. What is a cloud virtual machine?
Section titled β1. What is a cloud virtual machine?β2. What is a vCPU?
Section titled β2. What is a vCPU?β3. How do you choose a VM size?
Section titled β3. How do you choose a VM size?β4. What is a VM image?
Section titled β4. What is a VM image?β5. What is block storage?
Section titled β5. What is block storage?β6. What is a network interface?
Section titled β6. What is a network interface?β7. Private IP vs public IP?
Section titled β7. Private IP vs public IP?β8. Why should administrative ports be restricted?
Section titled β8. Why should administrative ports be restricted?β9. What is vertical scaling?
Section titled β9. What is vertical scaling?β10. What is horizontal scaling?
Section titled β10. What is horizontal scaling?β11. What happens when a VM is stopped?
Section titled β11. What happens when a VM is stopped?β12. Stop vs delete?
Section titled β12. Stop vs delete?β13. Why might a public IP change?
Section titled β13. Why might a public IP change?β14. How would you troubleshoot an unreachable VM?
Section titled β14. How would you troubleshoot an unreachable VM?β15. Why is VM monitoring important?
Section titled β15. Why is VM monitoring important?β16. What factors influence VM cost?
Section titled β16. What factors influence VM cost?β17. Why should workloads be right-sized?
Section titled β17. Why should workloads be right-sized?β18. Why are tags important?
Section titled β18. Why are tags important?β19. Why should cloud resources be documented?
Section titled β19. Why should cloud resources be documented?β20. What should be checked after deleting a VM?
Section titled β20. What should be checked after deleting a VM?βπ¨ Scenario Interview Question 1
Section titled βπ¨ Scenario Interview Question 1βA Linux VM is running but SSH does not work.
Walk through:
VM State βIP βRoute βSecurity Rule βOS Firewall βSSH Service βCredentialsπ¨ Scenario Interview Question 2
Section titled βπ¨ Scenario Interview Question 2βCPU utilization stays above 90% during business hours.
Do not immediately say:
buy the biggest VM.
Consider:
-
workload behavior
-
application issue
-
CPU trends
-
right-sizing
-
vertical scaling
-
horizontal scaling
π¨ Scenario Interview Question 3
Section titled βπ¨ Scenario Interview Question 3βA development VM runs only eight hours per day but remains powered on 24/7.
Possible improvement:
Usage Requirement βSchedule βStop When Unused βReduce Costπ¨ Scenario Interview Question 4
Section titled βπ¨ Scenario Interview Question 4βA VM has a public IP and SSH is open to the entire internet.
Identify:
unnecessary administrative exposure.
Recommend:
-
trusted source restriction
-
stronger access architecture
-
MFA/identity-aware administrative mechanisms where appropriate
-
monitoring
π¨ Scenario Interview Question 5
Section titled βπ¨ Scenario Interview Question 5βThe VM was deleted, but the organization is still being charged.
Investigate:
-
disks
-
snapshots
-
IP addresses
-
load balancers
-
backup
-
other associated services
π¨ Scenario Interview Question 6
Section titled βπ¨ Scenario Interview Question 6βAn application becomes slow after user demand increases.
Review:
CPUMemoryStorageNetworkApplicationDatabaseDo not assume the VM size is automatically the root cause.
π§ VM Troubleshooting Framework
Section titled βπ§ VM Troubleshooting FrameworkβMemorize:
Compute βStorage βNetwork βSecurity βOperating System βApplication βMonitoringπ¬ Interview Tip
Section titled βπ¬ Interview TipβAvoid:
βIf the VM doesnβt work, I would restart it.β
A stronger answer is:
βI would first verify the VM power and health state, then validate addressing, routing, network security controls, operating-system firewall rules, service availability, authentication, and relevant logs or monitoring data before making changes.β
That demonstrates Cloud Support Engineer thinking.
π Portfolio Deliverables
Section titled βπ Portfolio DeliverablesβKeep sanitized versions of:
1. VM Architecture Diagram
Section titled β1. VM Architecture DiagramβAdministrator βNetwork βSecurity Controls βVM βStorage2. VM Deployment Record
Section titled β2. VM Deployment RecordβInclude:
-
configuration
-
sizing
-
operating system
-
networking
-
storage
3. Before/After Resize Evidence
Section titled β3. Before/After Resize EvidenceβShow:
Original VM βResize βUpdated VM4. Troubleshooting Record
Section titled β4. Troubleshooting RecordβDocument:
Problem βEvidence βRoot Cause βRemediation βValidation5. Cost Review
Section titled β5. Cost ReviewβExplain why the VM size was appropriate for the workload.
π Resume Examples
Section titled βπ Resume ExamplesβInstead of:
Created cloud virtual machines.
Use:
Deployed and managed Linux cloud virtual machines including compute sizing, virtual storage, network interfaces, secure administrative access, lifecycle operations, monitoring, vertical scaling, troubleshooting, and resource cleanup.
Or:
Troubleshot cloud VM connectivity across IP addressing, routing, network security controls, operating-system services, and authentication while documenting root cause and remediation.
β Job-Readiness Check
Section titled ββ Job-Readiness CheckβYou should now be able to explain:
-
how a VM is created
-
how VM sizing works
-
what a VM image provides
-
how virtual storage attaches to compute
-
how a VM connects to a virtual network
-
private vs public addressing
-
how administrative connectivity works
-
why inbound access should be restricted
-
how to inspect CPU and memory
-
how to inspect storage
-
how to inspect networking
-
how VM monitoring works
-
how to stop/start a VM
-
how vertical scaling works
-
vertical vs horizontal scaling
-
how to troubleshoot an unreachable VM
-
how VM lifecycle affects cost
-
how to clean up associated resources
π Mission Complete
Section titled βπ Mission CompleteβYou have now moved from simply having a cloud account to operating your first cloud workload.
You practiced:
Requirements βCompute βOperating System βStorage βNetworking βSecurity βDeployment βAdministration βMonitoring βScaling βTroubleshooting βCleanupThe key lesson is:
Deploying a VM is easy. Professionally managing its compute, storage, networking, security, monitoring, cost, troubleshooting, and lifecycle is the real cloud engineering skill.
π Whatβs Next?
Section titled βπ Whatβs Next?βYou have worked with a single VM and its basic networking.
The next lab moves deeper into cloud networking.
You will build a segmented cloud network and learn how enterprise workloads are separated into different network tiers.
You will work with:
-
virtual networks
-
CIDR ranges
-
subnetting
-
public subnets
-
private subnets
-
application tiers
-
database tiers
-
IP address planning
-
segmentation
-
workload placement
-
traffic-flow documentation
You will build:
Cloud Virtual Network | βββ Public Subnet | βββ Application Subnet | βββ Database Subnetβ‘οΈ Next: Lab 03 β Build a Segmented Cloud Network