AZ-900 Flashcards
What is the Azure Resource Manager?
A manager layer that is able to create, update, and delete resources accepting requests from Azure resources or APIs
What is Azure Service Health?
Helps keep track of Azure resources by offering Azure status, Service Health, and Resource Health
- provides RCA reports after an outage
What is Service Health?
A service that provides information about services and regions you are using
- notifies of Azure related service issues
- contains information about planned outages
What is Resource Health
A service that provides a view of your individual resources
What are factors that affect costs in Azure?
- resource type
- consumption
- maintenance
- geography
- subscription type
- Azure marketplace
What is Application Insights?
A service that monitors web applications
What is the SLA of a VM
99.9%
What is the SLA of a VM Availability scale set?
99.95%
What is the SLA of an Availability Zone
99.99%
What is the SLA of geo-redundant storage
99.99…99% (sixteen 9s)
What is Azure virtual networking?
A service that enables VMs, web apps, and DBs to communicate with each other
What is Azure ExpressRoute?
A service that provides private connectivity that is not over the internet
- can extend on-prem network into the cloud over a private connection
What is a Network Security Group?
A service that provides inbound and outbound security rules to filter traffic
What is Locally Redundant Storage (LRS)?
replicates data 3x within a single availability zone
What is Zone Redundant Storage (ZRS)?
replicates data across 3 availability zones in a primary region
What is Geo-Redundant Storage?
replicates data 3x in a single availability zone in primary region (LRS) AND replicates data 3x in a single availability zone in secondary region (LRS)
What is Geo-Zone-Redundant Storage?
replicates data across 3 availability zones in a primary region (ZRS) AND replicates data 3x in a single availability zone in secondary region (LRS)
What are the dependent resources a VM must have?
- Azure Virtual Network
- NIC card
- OS disks
- resource group
Up to how many levels can management groups support?
6 levels of depth
Does Azure Cloud Shell provide a way to run Azure CLI and Azure PowerShell on IOS and Android devices?
Yes
When a resource group is deleted, are the resources deleted?
Yes
What resource is required to use Azure Cloud Shell?
Azure storage account
What are characteristics of Azure DNS?
- Uses anycast networking
- You cannot buy the domain in Azure DNS
- supports private DNS domains
What is Microsoft Entra External ID
refers to all the ways you can securely interact with users outside of your organization
What are User Defined Routes
allows you to control the routing tables between subnets within a virtual network or between virtual networks
Business to business (B2B) collaboration
Collaborate with external users by letting them use their preferred identity to sign-in to your Microsoft applications or other enterprise applications, guest users in AD
B2B direct connect
Establish a mutual, two-way trust with another Microsoft Entra organization for seamless collaboration
Microsoft Entra business to customer (B2C)
Publish modern SaaS apps or custom-developed apps (excluding Microsoft apps) to consumers and customers
What are the benefits of Azure Virtual Networking?
- isolation and separation
- internet communications
- communicate between Azure resources
- communicate with on-prem resources
- route network traffic
- filter network traffic
- connect virtual networks
virtual private network
uses encrypted tunnel within another network
VPN gateway
deployed in a dedicated subnet of the virtual network to enable connection to:
- on-prem to virtual networks
- individual devices to virtual network
- virtual network to another
What are the types of VPN
policy based and route based
policy based VPN
specify statically the IP address of packets that should be encrypted
route based VPN
decides which tunnel interface to use when sending each packet
Is the archive access tier set at the storage account level?
No, it needs to be set at the blob level
Does Azure Advisor give security recommendations to Azure AD?
No
Microsoft Defender for Identity
helps secure your identity monitoring across your organization
Microsoft Entra Connect
on-premises Microsoft application that’s designed to meet and accomplish your hybrid identity goals
Azure File Sync
enables centralizing your organization’s file shares in Azure Files, while keeping the flexibility, performance, and compatibility of a Windows file server
Virtual network peering
enables you to seamlessly connect two or more Virtual Networks in Azure
Site-to-Site VPN Connection
used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel
point-to-site connection
connect individual devices to virtual network
RBAC Contributor role
all access to manage resources, cannot assign roles
RBAC Reader role
read only access to resources
RBAC Owner role
all access to manage resources and ability to assign roles
RBAC VM Contributor role
manage VM, cannot access them
elasticity vs. scalability
elasticity: dynamic adjust to meet demand fluctuations
scalability: expand capacity to meet growing demands