AZ-305 Flashcards

1
Q

What is the PowerShell command to see what version of the Azure CLI you’re using?

A

az version

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How do you switch to bash from Azure CLI?

A

bash

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How do you switch from bash to PowerShell Azure CLI?

A

pwsh

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which Azure services are non-regional?

A
  • Azure AI Bot Service
  • Azure Advisor
  • AAD B2C (Entra?)
  • App Service Static Web App
  • App center

Break into smaller cards like “is x regional?”

https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/final/en-us/microsoft-product-and-services/azure/documents/pxr/024-Azure-product-availability-Non-Regional-1.pdf

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How many datacenters are in an Azure region?

A

1+

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Some services and VM features are only available in certain __________.

A

Azure Regions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the Azure Global services?

A
  • Azure DNS
  • Entra ID
  • Azure Traffic Manager
  • Azure CDN
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are Azure Availability Zones?

A

Separate datacenters within an Azure Region. There are a minimum of 3 in an availability-zone-enabled Azure Region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What Azure services are availability zones primarily used for?

A
  • VMs
  • Managed Disks
  • Load Balancers
  • SQL DBs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the three categories for services that support availability zones?

A
  • Zonal services: You pin the resource to a specific zone (for example, VMs, managed disks, IP addresses).
  • Zone-redundant services: The platform replicates automatically across zones (for example, zone-redundant storage, SQL Database).
  • Non-regional services: Services are always available from Azure geographies and are resilient to zone-wide outages as well as region-wide outages.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are Azure Region Pairs?

A

Pairs of regions for redundancy/resilience that are within the same geography (US, Europe, etc), but at least 300 miles apart.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What do Azure Region Pairs protect from?

A
  • Power outages
  • Natural disasters
  • Civil unrest
  • Physical network outages
  • Azure updates are on one region at a time
  • One region in every pair is prioritized in extensive outages
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are Azure Sovereign Regions?

A

Instances of Azure that are isolated from the main instance of Azure. These include China and DoD.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the hierarchy of Azure management infrastructure?

A
  • Tenant
  • Management Group
  • Subscription
  • Resource Group
  • Resource
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How do access permissions on resource groups work?

A

They provide the specified access to all resources within the RG. RGs are a good option for separating resources that need different access schemas.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the two types of boundaries that subscriptions can represent?

A
  • Billing: different types of billing requirements; organize and manage costs.
  • Access Control: different permissions based on environment/organizational-structure.
17
Q

How do policies work with inheritance?

A

All descendant containers and resources inherit the policy.

18
Q

How do contradictions in policies work in Azure?

A

A contradictory policy cannot be created at lower levels. At higher levels, the “higher” policy takes precedence. (Verify)

19
Q

How can the management of a single user’s permissions across several different subscriptions be simplified?

A

A management group - if the subscriptions are appropriate for being placed into a management group, or are already in one.

20
Q

What level of depth can a management group tree support?

A

Six levels of depth, not including the root level or subscription level (nested groups up to six).

21
Q

What are Azure Management Groups used for?

A

Managing access permissions, policies, and compliance across a group of Azure subscriptions.

22
Q

How many parents can a management group or subscription support?

A

Only one.

23
Q

What are the security types for VMs in Azure

A

Standard
Trusted launch
Confidential

24
Q

What is the trusted launch security type for VMs?

A

It protects against persistent and advanced threats with configurable features like secure boot and virtual TPM (vTPM). Designed to meet security compliance requirements and provide stronger protections.

25
Q

What is the confidential security type for VMs?

A

Trusted launch features with higher confidentiality and integrity, leveraging hardware-based Trusted Execution Environments (TEEs) to ensure that data is protected from access by cloud operators and other VMs on the same host.

Confidential VMs are ideal for sensitive workloads requiring the highest level of data confidentiality.

26
Q

When are VMs the ideal choice?

A

When you need:

  • Total control over the OS
  • To be able to use custom software
  • To use custom hosting configurations
27
Q

Are VMs IaaS, PaaS, or SaaS?

A

IaaS

28
Q

What’s the difference between availability sets and scale sets for VMs?

A

Availability sets distribute VMs across multiple physical servers in a datacenter, providing resilience and availability. Scale sets are exact duplicates that are load balanced, providing auto-scaling and high availability.

29
Q

How do you handle load balancing for VM scale sets?

A

Load balancers can be deployed automatically or assigned at the time of creation (portal, CLI, or ARM). Health probes can be added and used as the VM health check for load balancing. After the load balancer is created/associated, it can be managed as a normal Azure resource.

30
Q

By default, how many fault domains will a VM be distributed across in an availability set?

A

3

31
Q

In what domains are VMs grouped within an availability set?

A

Update domains and fault domains.

32
Q

What is a VM update domain?

A

In an availability set, the update domain is a grouping where all VMs contained will be updated together. The number of update domains for an availability set can be set manually. There is a 30 minute recovery window before Azure rolls an update out to the next update domain.

33
Q

What are the max number of update domains and fault domains for availability sets?

A

Update domains: 20
Fault domains: 3

34
Q
A