AZ-104-D Flashcards
What is the PowerShell cmdlet to create users in Azure AD?
New-AzureADUser
How can you manage bulk updates of users and groups in Azure AD?
Use PowerShell
Where can you manage registered devices in Azure AD?
In the Azure portal under Devices
How can you enable MFA for users in Azure AD?
In Azure AD > Users > Multi-Factor Authentication
What cmdlet is used to assign roles to users or groups in Azure RBAC?
New-AzRoleAssignment
How can custom roles be created in Azure RBAC?
Using the Azure portal, PowerShell, CLI, or REST API
Where can Azure policies be applied?
At the subscription, resource group, or resource level using the Azure portal
What cmdlet is used to create tags for resources in Azure?
az tag create
How are multiple subscriptions managed in Azure?
Using management groups in the Azure portal
What are the default roles for new Azure subscriptions?
Account Administrator and Service Administrator
What is the maximum number of SMS messages per hour for Azure Monitor alerts?
12 messages if the alert is triggered every minute
What is the default retention period for Azure VM backups?
30 days
Where must the Recovery Services Vault be located relative to the VMs it protects?
In the same region as the VMs it protects
What service supports backup of Azure SQL databases?
Azure Backup service
What replication options are supported by Azure Storage accounts?
LRS, ZRS, GRS, RA-GRS, GZRS, and RA-GZRS
What are the three types of blobs in Azure Blob Storage?
Block Blobs, Page Blobs, and Append Blobs
What are the three access tiers in Azure Blob Storage?
Hot, Cool, and Archive
What is the maximum retention period for soft delete in Azure Blob Storage?
365 days
What service provides managed file shares in Azure?
Azure Files
How can on-premises file servers synchronize with Azure Files?
Using Azure File Sync
What storage account type supports all storage services?
General-Purpose v2 Storage
What are SAS tokens used for in Azure Storage?
To grant limited access to Azure Storage resources without exposing the account key
What are the required parameters for SAS tokens?
SignedResourceTypes (srt) and SignedServices (ss)
How are RBAC roles inherited in Azure?
From parent scopes to child resources
How can custom roles be shared in Azure RBAC?
Across subscriptions within the same Azure AD directory
What is the difference between Basic and Standard Public IPs in Azure?
Standard tier supports zone-redundant deployment, while Basic does not
What does VNet peering allow in Azure?
Communication between virtual networks as if they were in the same network
What is CIDR notation used for in Azure Networking?
To define IP address ranges in VNets and subnets
Where can NSG rules be applied in Azure Networking?
To subnets and NICs to control traffic flow
What do load balancers do in Azure Networking?
Distribute incoming network traffic across multiple VMs
What does Application Gateway provide in Azure Networking?
Application-level routing and load balancing
What does Traffic Manager use to distribute traffic globally in Azure?
DNS
How are VNets divided in Azure?
Into smaller, manageable sections called subnets
What do User-Defined Routes (UDRs) allow in Azure Networking?
Custom routing paths for network traffic
What does VNet-to-VNet connectivity enable in Azure?
Direct communication between VNets
What does Azure Virtual WAN provide?
Centralized network connectivity and management
How are DNS zones managed in Azure?
Using Azure DNS to host DNS records
What security feature does Azure Firewall provide?
Network security through filtering and logging
What do private endpoints allow in Azure Networking?
Services to be accessed privately over a VNet