Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ-104 > 9 > Flashcards

9 Flashcards

1
Q

How many custom roles can be created per Azure AD directory?

A

5,000 custom roles per directory.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the custom role limit for Azure Germany and Azure China 21Vianet?

A

2,000 custom roles per directory.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the concept of RBAC inheritance in Azure?

A

Granting a user access to the Owner role at the management group scope grants Owner rights to all subscriptions under that management group, including all resource groups and resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the role assignment limit for each subscription in Azure?

A

2,000 role assignments per subscription.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the role assignment limit for each management group in Azure?

A

500 role assignments per management group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Can role assignments be revoked at a child scope in Azure RBAC?

A

No, role assignments inherited from the parent scope cannot be revoked at a child scope.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a deny assignment in Azure?

A

A deny assignment is used to exclude service principals from accessing child scopes and is evaluated before role assignments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What permissions are required to create a custom role in Azure?

A

Microsoft.Authorization/roleDefinitions/write permission on all AssignableScopes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How are deny assignments controlled in Azure?

A

Deny assignments are set and controlled by applying a Resource lock for resources created through Azure Blueprints.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What happens to resources during a move operation in Azure?

A

Resources are locked, and both write and delete operations are blocked, but the underlying service continues to function.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How long can a move operation take to complete in Azure?

A

Up to four hours.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does Azure Key Vault safeguard?

A

Cryptographic keys, storage account keys, data encryption keys, and certificate private keys.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is BYOK in Azure Key Vault?

A

Bring Your Own Key, referring to importing keys into the Key Vault.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does the AzCopy command do?

A

Copies data between storage accounts using SAS tokens.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How can you synchronize blobs between two Azure storage accounts?

A

Using the azcopy sync command.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the maximum retention period for soft delete in Azure Blob Storage?

A

365 days.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the three types of blobs in Azure Blob Storage?

A

Page Blobs, Block Blobs, and Append Blobs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the maximum size of a Page Blob in Azure?

A

8 TB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the maximum size of a Block Blob in Azure?

A

4.75 TB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the maximum size of an Append Blob in Azure?

A

195 GB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the three kinds of storage accounts in Azure?

A

General-Purpose v1, General-Purpose v2, and Blob Storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What tools can manage Azure Storage directly from Microsoft?

A

Azure portal, PowerShell, CLI, Storage Explorer, and AzCopy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What access control methods are available for Azure Storage accounts?

A

Azure AD authentication, storage account name and key, SAS, SAS with access policy, storage firewall, and virtual network service endpoints.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the purpose of Azure Storage lifecycle management?

A

Automatically transition data to lower-access tiers or delete data based on preconfigured rules.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What are User-Defined Routes (UDRs) in Azure?

A

Change the default behavior of subnets, typically to direct outbound traffic to other locations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is forced tunneling in Azure networking?

A

Routing outbound Internet traffic via a VPN connection to a network security device.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are Azure Activity Logs?

A

Logs that surface data at the subscription level, separate from diagnostic logs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

How long are Azure Activity Log events retained?

A

90 days.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is Azure Monitor for Containers?

A

A service that provides monitoring capabilities for AKS and Azure Container Instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is the retention period for logs in Azure Monitor?

A

Logs can be retained for up to 730 days depending on the pricing tier.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is the function of Azure Storage Explorer?

A

Provides a graphical interface to manage and access Azure Storage resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What are the replication options for Azure Storage accounts?

A

LRS, ZRS, GRS, RA-GRS, GZRS, and RA-GZRS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is Locally Redundant Storage (LRS)?

A

Replicates data within a single datacenter in a region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is Zone-Redundant Storage (ZRS)?

A

Replicates data across multiple availability zones in a region.

35
Q

What is Geo-Redundant Storage (GRS)?

A

Replicates data to a secondary region hundreds of miles away.

36
Q

What is Read-Access Geo-Redundant Storage (RA-GRS)?

A

Provides read access to the replicated data in the secondary region.

37
Q

What is the maximum size of a file share in Azure Files?

A

100 TiB for premium file shares.

38
Q

What is the maximum number of sync groups per storage account in Azure File Sync?

A

200 sync groups.

39
Q

What is the purpose of Azure Resource Manager (ARM) templates?

A

Enable infrastructure as code for deploying and managing Azure resources.

40
Q

What permissions are required to deploy ARM templates?

A

Contributor or Owner role on the resource group.

41
Q

What is the purpose of Azure Blueprints?

A

Enables deployment of a repeatable set of Azure resources and policies to ensure compliance and governance.

42
Q

What is the maximum number of disks supported by a VM in Azure?

A

256 disks per VM, depending on the VM size.

43
Q

What are the two allocation methods for private IP addresses in Azure?

A

Dynamic and static.

44
Q

What is the purpose of Azure Bastion?

A

Provides secure RDP and SSH connectivity to VMs without a public IP.

45
Q

What is the purpose of DNS zones in Azure?

A

To host DNS records for a domain in Azure DNS.

46
Q

What are NSG rules in Azure?

A

Network Security Group rules that can be applied to subnets and NICs to control traffic flow.

47
Q

What is the function of Azure Traffic Manager?

A

Uses DNS to distribute traffic to different endpoints globally.

48
Q

What is Azure Application Gateway used for?

A

Provides application-level routing and load balancing.

49
Q

What are the two types of public IP address SKUs in Azure?

A

Basic and Standard.

50
Q

What is Azure AD Connect?

A

A tool to synchronize on-premises Active Directory with Azure AD.

51
Q

What are the components of Azure AD Connect?

A

Azure AD Connect sync, Azure AD Connect Health, and Azure AD Connect wizard.

52
Q

What are Managed Identities in Azure?

A

Provide Azure services with an automatically managed identity in Azure AD.

53
Q

What is the purpose of Azure Policy?

A

Enforces rules and effects over resources to ensure compliance.

54
Q

What is the default retention period for Azure VM backups?

A

30 days.

55
Q

What is the maximum retention period for logs in Azure Monitor?

A

730 days.

56
Q

What is the purpose of Azure Site Recovery?

A

Supports site-to-site recovery for Azure VMs, on-premises VMs, and physical servers.

57
Q

What is required for cross-region replication in Azure Site Recovery?

A

Both the primary and secondary regions must support the resource being replicated.

58
Q

What are the benefits of Azure Proximity Placement Groups?

A

Reduce latency by ensuring VMs are physically located close to each other.

59
Q

What is the maximum number of custom roles per directory in Azure?

A

5,000 custom roles.

60
Q

What permissions are required to create a custom role in Azure?

A

Microsoft.Authorization/roleDefinitions/write permission on all AssignableScopes.

61
Q

What is the maximum number of role assignments per management group?

A

500 role assignments.

62
Q

What is the maximum number of role assignments per subscription?

A

2,000 role assignments.

63
Q

What is the maximum number of custom roles in Azure Germany and Azure China 21Vianet?

A

2,000 custom roles per directory.

64
Q

What is a deny assignment in Azure?

A

A way to exclude service principals from accessing child scopes and is evaluated before role assignments.

65
Q

What are the different types of blobs in Azure Blob Storage?

A

Block Blobs, Page Blobs, and Append Blobs.

66
Q

What is the maximum size of a Block Blob in Azure?

A

4.75 TB.

67
Q

What is the maximum size of an Append Blob in Azure?

A

195 GB.

68
Q

What is the default retention period for Azure Blob Storage soft delete?

A

365 days.

69
Q

What is the function of Azure Key Vault?

A

Safeguards cryptographic keys and secrets used by cloud applications and services.

70
Q

What is the purpose of Azure AD Conditional Access?

A

Enforces access controls based on conditions such as user location, device state, and risk level.

71
Q

What is Azure Policy compliance evaluation cycle?

A

Evaluates resource compliance every 24 hours and triggers on resource changes.

72
Q

What is the purpose of Azure Cost Management and Billing?

A

Provides tools to monitor, allocate, and optimize cloud spending, and set budgets and alerts.

73
Q

What is Azure Reservations?

A

Allows pre-purchasing of resources at a discounted rate for a one- or three-year term.

74
Q

What is the purpose of Azure DevTest Labs?

A

Provides environments for testing and development with features to control costs and manage environments efficiently.

75
Q

What is Azure Sentinel?

A

Provides cloud-native security information and event management (SIEM) and security orchestration automated response (SOAR) solutions.

76
Q

What is Azure AD Privileged Identity Management (PIM)?

A

Helps manage, control, and monitor access to important resources in Azure AD, Azure, and other Microsoft Online Services.

77
Q

What is the purpose of Azure Migrate?

A

A service that helps discover, assess, and migrate on-premises workloads to Azure.

78
Q

What is the maximum size of an ARM template?

A

4 MB.

79
Q

What is Azure Hybrid Use Benefit?

A

Allows you to use on-premises licenses for Azure VMs.

80
Q

What is the maximum number of disks supported by a VM in Azure?

A

256 disks per VM.

81
Q

What is Azure Bastion?

A

Provides secure RDP and SSH connectivity to VMs without a public IP.

82
Q

What is Azure DNS?

A

A hosting service for DNS domains, providing name resolution using Microsoft Azure infrastructure.

83
Q

What are the benefits of using Azure Automation?

A

Enables automation of frequent, time-consuming tasks.

AZ-104 (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions