Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

a-zee-on3-humdred-f0ur > 02-Governance and Compliance > Flashcards

02-Governance and Compliance Flashcards

1
Q

What are Datacenters organized into

A

Organized into Regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are Regions

A

Geographical locations that create multiple Datacenters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What to think about when deploying resources to a region

A

1 - When selecting Region, do you have legal authority to deploy resources to location

2 - Does that region have all the services I require to complete my mission

3 - Is that region as close as possible to my users (minimize latency)

4 - Are the services cheaper in that region (cost of doing business with Microsoft varies by region)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How is planned maintenance done on region pairs

A

It is done one region at a time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How far apart are region pairs

A

300 miles apart

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Who can create an Azure subscription

A

Only identities in Azure AD or in a directory that is trusted by Azure AD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Azure Subscription

A

Logical unit of Azure services that is linked to an Azure account

Security and Billing Boundary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How do you get a Subscription

A
  1. Enterprise Agreement - customers make upfront commitment and user services
  2. Resellers - provide simple way to purchase
  3. Partners can design and implement your solution
  4. Personal free account - start right away
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

List subscription types

A
  1. Free - $200 credit for first 30 days, free limited access for 12 months
  2. Pay-as-you-go - monthly charge
  3. CSP - Cloud Solutions Provider gives discounts
  4. Enterprise - discounts for new licenses and Software Assurance
  5. Student - $100 for 12 months
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does Cost Management include

A
  1. Conduct cost analysis
  2. Create a budget
  3. Review recommendations
  4. Export the data
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are Resource Tags?

A

Logically organize resources into categories

Use name-value pair

Gives metadata to resources

Helpful for rolling up billing informations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are Azure Reservations

A

Save money by pre-paying for services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are Azure Hybrid Benefits

A

Use Windows Server and SQL Server on-prem licenses with Software Assurances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are Azure Credits

A

Monthly credit benefit that allows you to experiment with, develop, and test new solutions on Azure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How should you choose Regions to save money

A

Use low-cost locations and regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are spot instances?

A

Take advantage of unused capacity and very low cost

Use for operations that can afford operation, such as batch processing.

You get 30 minute notice before eviction.

No SLA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are Management Groups

A

Manage multiple subscriptions.

Apply governance conditions and policies at scale

Targeting of policies and spend budgets across subscriptions and inheritance down the hierarchies

Compliance and cost reporting by organization (business/teams)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Azure Policy

A

Service in Azure that you use to create, assign and manage policies

Runs evaluations and scans for non-compliant resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are advantages of Azure Policy

A
  1. Enforcement and compliance
  2. Apply policies at scale
  3. Remediation
20
Q

What are some things you can set with Azure policy

A
  1. Allowed resource types
  2. Allowed virtual machine SKUs
  3. Allowed locations
  4. Require tag and its value
  5. Azure Backup should be enabled for Virtual Machines
21
Q

How to Implement Azure Policy

A
  1. Browse Policy Definitions
  2. Create Initiative Definitions
  3. Scope the Initiative Definition
  4. View Policy evaluation results
22
Q

What is scoping?

A

To what level do you want to assign an initiative definition, i.e. subscription, resource group?

23
Q

What is PCI

A

Payment Card Industry

24
Q

What are Initiative Definitions?

A

Set of Policies

Example: Initiative Definitions complies with PCI

25
Q

Policy Definitions

A

Many policy definitions are available

Import policies from GitHUB

Have specific JSON format

Require planning

26
Q

How do you Scope the Initiative Definition

A

Assign definition to Scope

Scope enforces Policy

Select subscription, and optionally the Resource Group

27
Q

How do you determine Compliance

A

See non-compliant initiatives, policies and resources in Dashboard

28
Q

What is Role Based Access Control

A

Fine-grained access management of resources in Azure

Helps you manage who has access to your resources, what they can do, and at what level

Who is the security principle
What specific operation can they carry out
Where is the scop

29
Q

What is Security Principle

A

Object that represents something that is requesting access to resources

30
Q

What is Role Definition

A

Collection of permissions that lists the operations that can be performed

31
Q

What is Scope

A

Boundary for the level of access that is requested

32
Q

What is Assignment

A

Attach a role definition to a security principle at a particular scope

33
Q

What is Role Definition

A

Is the what

What operations can or cannot be performed

34
Q

What is Role Assignment

A

Process of binding a role definition to a user, group, or service principal at a scope for the purpose of granting access

Binds the what to the who and the where

35
Q

What are Azure RBAC roles

A

Manage access to Azure RESOURCES

Scope specified at multiple levels

36
Q

What are Azure AD roles

A

Manage access to Azure AD OBJECTS

Scope is tenant level

37
Q

By default does Global Admin have access to Subscription resources

A

As Global Admin, they don’t have access to Subscription resources

They need to elevate their access first

38
Q

Fundamental RBAC Roles

A
  1. Owner
  2. Contributor
  3. Reader
  4. User Access Administrator
39
Q

Owner Permission

A

fill in

40
Q

Contributor

A

fill in

41
Q

Reader

A

fill in

42
Q

User Access Administrator

A

fill in

43
Q

ARM Template Advantages

A

Improves consistency

Express complex deployment

Less error - no fat fingering

Code based

Promotes reuse

Modular and can be linked

Simplifies orchestration

44
Q

Describe Template Schema

A

Defines all Resource manage resources in deployment

Written in JSON

Collection of key-value pairs

Each key is a string

Each value can be a string, number, Boolean expression, list of values, object

45
Q

Describe Template Parameters

A

Which values are configurable when template is run

a-zee-on3-humdred-f0ur (11 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions