az900 Flashcards
You want your virtual machines to survive a data center failure. Which one of these options will meet the requirement?
Use Availability Sets
Deploy VM in Two or more Availability Zones
None of the above
Deploy VM in Two or more Availability Zones
Explanation
The best approach to survive a data center failure is to deploy your VMs to multiple AZs.
You do not want to allow creation of an Azure Cosmos DB instances in specific resource groups. Which of these options would you recommend?
Resource Group Lock
Request Azure Customer service
Configure a Azure Policy
Configure a Azure Policy
Explanation
Azure Policy helps you create, assign, and manage policies. You can automatically ensure that resources stay compliant with defined standards and SLAs.
You are concerned about encryption and security of documents and emails created by your team. You want a flexible service to protect and encrypt document and emails. Which of these services would you recommend?
Azure Security center
Azure Information Protection
Azure Storage account
Azure Information Protection
Explanation
Azure Information Protection helps you classify and protect your documents and emails. You can add labels indicating what kind of protection/encryption you want. It uses Azure Rights Management (Azure RMS) - Integrates with Office 365, Azure Active Directory etc.
You have several virtual machines running on-premises with Windows 10. You are planning to map a shared network drive for sharing configuration between all these virtual machines. Which of these Azure services would you recommend?
Virtual Machine Data Disk
Azure Blob Containers
Azure Files
Azure Files
Explanation
Azure Files: Managed File Shares. Connect from multiple devices concurrently.
You are running a web application on an Azure VM. You want to ensure that the application is accessible from internet by opening up access to ports 80 and 443 on the VM. Which of these would you need to configure?
Network Security Groups
Subnet
VPN
Network Security Groups
Explanation
Network Security Groups allow you to configure multiple inbound and outbound security rules. You can allow or block traffic based on source/destination IP address, protocol and port. You can restrict traffic between resources such as virtual machines and subnets.
TRUE or FALSE: All virtual machines in a Virtual Network can communicate with other machines inside the same Virtual Network irrespective of the subnets they are in.
TRUE
FALSE
True
Explanation
Resources in the same VNet can communicate using private IP addresses even if they are in different subnets
TRUE or FALSE: You have created a Virtual Network with two subnets - WebSubnet for deploying your VMs, DbSubnet for deploying your databases. By default, all VMs in WebSubnet can access databases created in DbSubnet.
TRUE
FALSE
TRUE
Explanation
Resources in the same VNet can communicate using private IP addresses even if they are in different subnets
__________ ensures business continuity by keeping business apps and workloads running during outages. When an outage occurs at your primary site, you fail over to secondary location, and access apps from there.
Azure Site Recovery
Azure Backup
Azure High Availability
Azure Fault Tolerance
Azure Site Recovery
TRUE or FALSE: A resource can have multiple locks like Read Lock and Delete Lock.
True
False
True
Explanation
Resource Locks prevent accidental deletion/modification of resources. You can have multiple locks on a resource.
What is the name of the local windows tool that syncs local active directory to Azure active directory?
Azure AD Connect
explain how many availability zones is a subscription mapped to in 1 region, plus how many ms between availability zones, how many buildings per az and how many regions in world aproximately and how many regions in usa,
Azure Regions A region consists of multiple datacenters located within a specific area, chosen for low-latency connections and linked through a specialized network. All Azure resources are created within an Azure region and subscription. Some regions may have default access restrictions.
3 availability zones in one az region. Each subscription is mapped to 3 availability zones but they are not the exact same availability zones as another subscription. Each availability zone is basically a separate building with own power, cooling, network etc. but is within the one region. Then there is multiple regions in USA and around world that are paired for updates etc.
52+ 6 coming regions world wide
9 USA specific regions
Think of resource groups of things that have a common _________
Life cycle.
network, servers, storage etc all belong to one resource group during it’s “life cycle”
Proving who you are vs what you have access to is _____ vs _____
authentication vs authorization
RBAC is ____
Policy is _____
Budget is ______
RBAC is who I am
Policy is what I can do
Budget is how much I can spend
What are the two permissions that I can set with a resource lock
CanNotDelete
ReadOnly
Application Insights, VM insights, Container insights and Log Analytics are features of:
Azure Monitor
Application Insights, VM insights, Container insights and Log Analytics are features of Azure Monitor.