Azure Flashcards

1
Q

What are Azure VM Scale sets?

A

Automatically increase or decrease in response to demand or a defined schedule

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is SQL Server Stretch Database ?

A

Dynamically stretch warm and cold transactional data from Microsoft SQL Server 2016 to Microsoft Azure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Evolution of Computing

A

Physical Server -> VMs -> Containers -> Functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a region ?

A

A region is a grouping of multiple datacenters
Azure has 58 regions across 140 countries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a geography?

A

A Geography is a discreet market of two or more regions that preserves data residency and compliance boundaries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are paired regions

A

Each region is paired with another region 300 miles away to ensure less downtime, disaster recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Azure GRS ?

A

Azure Geo-redundant Storage(GRS) replicates data to a secondary region automatically, ensuring that data is durable even in the event that the primary region isn’t recoverable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Are all cloud services available in every region ?

A

No, Not all cloud services are available in every region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Recommended region ?

A

A region that provides the broadest range of service capabilities and is designed to support availability zones now or in the future

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Alternate region ?

A

Alternate (other) region is a region that extends Azure’s footprint within a data residency boundary where a recommended region also exists . Not designed to support AZs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is General Availability?

A

General Availability(GA) is when a service is considered ready to be used publicly by everyone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How the availability of service is categorized in Azure ?

A

Azure categorizes availability into three types : Foundational , Mainstream and Specialized

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Foundational Availability?

A

When GA, immediately or in 12 months in Recommended and Alternate regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Mainstream Availability?

A

When GA immediately or in 12 months in Recommended Regions . May become available in Alternate regions based on the customer demand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Specialized Availability ?

A

Available in Recommended or Alternatre regions based on customer demand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Availability Zone ?

A

Availability is physical location made up of one or more datacenter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is Fault Domain ?

A

A logical grouping of hardware to avoid a single point of failure within an AZ group of virtual machines that share a common power source and network switch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Update Domain ?

A

Azure may need to apply updates to the underlying hardware and software. Update domains ensure your resources do not go offline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What type of domain is the Availability Zone in?

A

An Availability Zone(AZ) in an Azure region is a combination of a fault domain and an update domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are different computing services provided in Azure ?

A

Azure provides Azure Virtual Machines, Azure Container Instances, Azure Kubernetes Service, Azure Service Fabric, Azure Functions, Azure Batch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are Azure Virtual Machines?

A

Windows or Linux virtual Machines. The most common type of Compute. You choose your OS, Memory, CPU, and Storage. You share hardware with other customers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are Azure Container Instances?

A

Docker as a Service - Run containerized apps on Azure without provisioning servers or VMs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is Azure Kubernetes Service(AKS) ?

A

Kubernetes as a Service - Easy to deploy, manage, and scale containerized applications. Uses the Open Source Kubernetes (k8) software

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is Azure Service Fabric?

A

Tier 1 Enterprise Containers as a Service
Distributed Systems Platform. Runs in Azure or on-premises.
Easy to package, deploy , and manage scalable and reliable microservices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What are Azure Functions ?

A

Event-driven, serverless compute(functions) run code without provisioning or managing servers. you pay only for the compute time you consume.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is Azure Batch ?

A

Plans , schedules and executes your batch computer workloads across running 100+ jobs in parallel . Use spot VMS to save money (
previously used low priority VMs to save on compute)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are different Storage Services provided in Azure?

A

Azure Blob Storage , Azure Disk Storage , Azure File Storage , Azure Queue Storage , Azure Table Storage , Azure Data box / Azure Data box heavy,
Azure archive storage , Azure Data Lake Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are deployment slots?

A

Deployment slots allow the app to run different instances called slots. Slots are different environments exposed via a publicly available endpoint

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Can we swap instances assigned to a slot on demand?

A

Yes , we can swap the instances assigned to a slot on demand .

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What are different developer and Mobile Tools for Azure?

A

Azure SignalR Service , Azure App Service , Visual Studio , Xamarin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What are Azure DevOps services?

A

Azure Boards , Azure Pipelines , Azure Repos , Azure Test Plans , Azure Artifacts , Azure DevTest Labs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is InfraStructure as Code (IAC)?

A

The process of managing and provisioning computer data centers through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is Azure Resource Manager(ARM)?

A

Azure Resource Manager (ARM) allows you to programmatically create Azure Resources via JSON template

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is Azure QuickStart?

A

It is a library of pre-made ARM templates provided by the community and partners to help you quickly launch new projects for a variety of stack scenarios

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is a Virtual Network (vNet) ?

A

It is a Logically Isolated section of the Azure Network Where you launch your Azure Resources. You can choose a range of IPs using CIDR Range

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is SubNet?

A

SubNets are a logical partition of an IP Network into multiple smaller network segments. You are breaking up your IP range for VNet into smaller networks

Subnets need to have a smaller CIDR range than Vnet to represent their portion.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is public subNet?

A

Subnet that can reach the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is private subnet?

A

Subnet that cannot reach the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What are different Cloud - Native Networking Services?

A

Azure DNS, Azure Virtual Network, Azure Load Balancer, Azure Application Gateway, Network Security Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What is Azure DNS ?

A

provides ultra-fast DNS responses and ultra-high domain availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is Azure Virtual Network ?

A

A logical isolated section of the Azure Network for customers to launch Azure resources within

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is Azure Load Balancer ?

A

OSI Level 4 (Transport) Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is Azure Application Gateway ?

A

OSI Level 7 (HTTP) Load Balancer , can apply a web application Firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What are Network Security Groups?

A

A virtual firewall at the Subnet level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is Azure Front Door ?

A

Scalable and Entry point of your global applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What are different enterprise/hybrid networking services ?

A

Azure Front Door, Azure Express Route, Virtual WAN, Azure Connection, Virtual Network Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What is Azure Express Route?

A

A connection between on premise to cloud from 50 Mbps to 10 Gbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What is Virtual WAN ?

A

A Networking interface that brings many networking , security and routing functionalities together to provide a single operational interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What is Azure Connection ?

A

A VPN Connection securely connects two azure local network via (IPsec)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What is Virtual Network Gateway?

A

A site-to-site VPN connection between an Azure virtual network and your local network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What is Azure Traffic Manager ?

A

It operates at the DNS layer to quickly and efficiently direct incoming DNS requests based on the routing method of your choice

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What is Azure DNS ?

A

Azure DNS allows you to host your domains on Azure. You can create DNS zones and manage your DNS records

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Will Azure DNS allow you to purchase domains?

A

No, it doesn’t allow to purchase domains, it provides only the ability to manage the domains

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Describe Azure Load Balancer?

A

It is used for evenly distributing incoming network traffic across a group of backend servers or resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What is public load balancer?

A

to load balance the incoming traffic coming from the internet to public-facing servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What is internal or private load balancer?

A

to load balance the incoming internal network traffic to private facing servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What are Scale Sets ?

A

This allows you to group identical virtual machines (vms) and automatically increase or decrease the amount of servers based on
Change in CPU, memory, disk, and network performance or on a predefined schedule

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What is Internet of Things?

A

A network of internet-connected objects able to collect and exchange data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What is IoT Central ?

A

Connects your IoT devices to the Cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What is IoT Hub?

A

Enable highly secure and reliable communication between your IoT application and the devices it manage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What is IoT Edge?

A

A fully managed service built on Azure IoT Hub .

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

What is BigData ?

A

A term used to describe massive volumes of structured/unstructured data that is so large it is difficult to move and process using traditional database and software techniques

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

What is Azure Synapse Analytics?

A

Enterprise data warehousing and Big Data Analytics
Intended to run SQL queries against large databases for things such as reporting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

What is HDInsight ?

A

Run open-source analytics software such as hadoop , Kafka and Spark

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Why use slots?

A

Different environments for different purposes, Prewarming, easy fallbacks, and minimizing restarts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Does Azure App Service provide built-in authentication and authorization support?

A

Yes it provides out-of-box authentication , you can sign in users and access data by writing minimal, or no code in your web app, RESTful API, mobile backend, and Azure Functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

What is Artificial Intelligence ?

A

Machines that perform jobs that mimic human behaviour

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

What is Machine Learning?

A

Machines that get better at a task without explicit programming

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

What is deep learning?

A

Machines that have artificial neural network inspired by human brain to solve human problems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

What is personalizer?

A

Deliver rich, personalized experiences for every user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

What is Translator?

A

Add real-time, multi-language text translation to your apps , website and tools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

What is Anomaly detector?

A

Detect anomalies in data to quickly identify and troubleshoot issues

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

What is Azure bot service?

A

Intelligent , serverless bot service that scales on demand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

What is a Form recogniser ?

A

Automate the extraction of text, key-value pairs, and tables from your documents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

What is computer vision?

A

Easily customize computer vision models for your unique use case

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

What is Language Understanding?

A

Build natural language understanding into apps, bots and IoT devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

What is QnA maker?

A

Create a conversational question and answer bot from your existing content

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

What is Text Analytics?

A

Extract information such as sentiment, key phrases, named entities and language from your text

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

What is Content Moderator?

A

Moderate text and images to provide a safer, more positive user experience

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

What is Face?

A

Detect and Identify people and emotions in images

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

What is Ink recogniser?

A

Recognize digital ink content, such as handwriting, shapes and document layout

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

What is Serverless?

A

When the underlying servers, infrastructure, and OS is taken care of by the cloud Service Provider(CSP) It will generally be highly available, scalable and cost-effective

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

What are features of Serverless?[

A

Event-Driven Scale, Abstraction of Servers, Micro-billing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

What is Event-Driven Scale ?

A

A serverless function can be triggered or trigger other events allowing you to compose complex applications and it just scales

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

What is the abstraction of servers?

A

Servers are abstracted away. Your code is described as functions . These functions can be running on different compute instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

What is Micro-billing?

A

Serverless compute could run for a fraction of a second
Billing into micro seconds will save money

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

What are Azure Functions?

A

Run small amounts of code known as serverless functions in your favourite language : c# , java , python , javascript , powershell

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

What is blob storage?

A

Serverless Object Storage . Just Upload files , don’t think the underlying systems , resizing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

What are logic apps?

A

Allows you to build workflows composed of Azure functions. Building a state machines for serverless compute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

What is Event Grid?

A

Uses pub/sub messaging system to allow you react to events and trigger other cloud services such as Azure Functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

What is Azure Portal?

A

It is a web-based, unified console that provides an alternative to command-line tools. You can manage your Azure subscription with the Azure portal. Build, manage, and monitor everything from simple web apps to complex cloud deployments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

What is powershell?

A

Powershell is a task automation and configuration management framework. It is a command-line shell and a scripting language.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

What does Powershell accept and return?

A

Unlike most shells, which accept and return text, Powershell is built on top of the .NET Common Language Runtime(CLR) and accepts and returns.NET Objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

What is Azure Poweshell?

A

A set of cmdlets for managing azure resources directly from the Powershell command line

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

What is Azure Cloud Shell?

A

Azure shell is an interactive , authenticated , browser-accessible shell for managing azure resources
It provides the flexibility of choosing the shell experience that best suits the way you work, either Bash or Powershell

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

What is a CLI?

A

A command Line Interface (CLI) processes commands to a computer program in the form of lines of text . Operating Systems implement a command line interface in a shell or terminal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
97
Q

What is Azure Trust Center?

A

A public-facing website portal providing easy access to privacy, security, and regulatory compliance information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
98
Q

What is Azure Active Directory?

A

Azure Active Directory(Azure AD) is Microsoft’s cloud-based identity access and management service, which helps your employees sign in and access resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
99
Q

What is Azure Security Center?

A

It is a Unified infrastructure security management system. It strengthens the security posture of your data centers and provides advanced threat protection across your hybrid workloads in the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
100
Q

What is Key Vault?

A

It helps you safeguard cryptographic keys and other secrets used by cloud apps and services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
101
Q

What are features of Key Vault?

A

Secret Management, Key Management, Certificate Management, Hardware Security Module

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
102
Q

What is secret management?

A

store and tightly control access to tokens, passwords , certificates , API keys , and other secrets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
103
Q

What is Key management?

A

create and control the encryption keys to encrypt your data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
104
Q

What is Certificate Management?

A

easily provision , manage and deploy public and private SSL certificated for use with Azure and internal connected resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
105
Q

What is hardware Security Module?

A

secrets and keys can be protected either by software or FIPS 140-2 Level 2 validated HSMs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
106
Q

What is HSM(Hardware Security Module)?

A

It is a piece of hardware designed to store encryption keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
107
Q

Is HSM Multi-tenant or Single-tenant?

A

HSM can be either Multi-tenant (Multiple customers virtually isolated on an HSM) or single tenant (single customer on a dedicated HSM)

108
Q

What is DDos(Distributed denial of Service ) Attack?

A

A malicious attempt to disrupt normal traffic by flooding a website with large amounts of fake traffic.

109
Q

What is Azure Firewall ?

A

Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources

110
Q

What are Azure Firewall Features?

A

Centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks

111
Q

What is Azure Information Protection?

A

Protects sensitive information such as emails and documents with encryption, restricted access and rights, and integrated security in office apps

112
Q

What is Application Gateway?

A

Application Gateway is a web traffic load balancer(Layer 7 HTTP) that re-routes traffic based on a set of rules. A web Application Firewall (WAF) can be attached for additional protection on OSI layer 7

113
Q

What is IDS/IPS?

A

Intrusion Detection System or Intrusion Protection System
A device or software application that monitors a network or a system for malicious activity or policy violations

114
Q

What is Azure Advanced Threat Protection?

A

It is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

115
Q

What is Microsoft Security Development Lifecycle?

A

MSDL is an industry-leading software security assurance process. Building security into each SDL phase of the development lifecycle helps you catch issues early, and it helps you reduce your development costs

116
Q

What is Azure Policy ?

A

Azure Policy is a service you can use to create, assign, and manage policies. A policy allows you to enforce or control the properties of a resource.

Azure Policy evaluates resources in Azure by comparing the properties of those resources to business rules. These business rules, described in JSON format, are known as Policy definitions.

117
Q

What is Azure role-based access control?

A

It helps you manage who has access to Azure resources , what they can do with those resources , and what areas they have access to

118
Q

What is Azure role assignment?

A

Role assignments the way you control the access to resources

119
Q

What does the role assignment consist of?

A

A role assignment consist of security principal, role definition, and scope

120
Q

What is a Security Principal?

A

A Security Principal represents the identities requesting access to Azure resources such as

User: An individual who has a profile in the Azure Active directory

Group: A set of users created in Azure Active directory

Service Principal: A security identity used by applications or services to access specific Azure resources

Managed Identity: An Identity in Azure Active Directory that is automatically managed by Azure

121
Q

What is Scope?

A

The scope is the set of resources that access for the role assignment applies to. Scope Access Control at the management, Subscription, or Resource Group level

122
Q

What is role definition?

A

A role definition is a collection of permissions. A role definition lists the operations that can be performed, such as read, write, and delete.
Roles can be high-level, like an owner, or specific, like virtual machine reader.

Azure has built in roles. you can define custom roles

123
Q

What is Lock resources?

A

As an admin, you need to lock a subscription, resource group, or resource to prevent other users from accidentally deleting or modifying critical resources.

Azure allows to delete, read-only

124
Q

What is Azure Management groups?

A

Managing multiple subscriptions(accounts)into a hierarchal structure

125
Q

What is Azure monitor?

A

Azure Monitor is a comprehensive solution for collecting , analyzing, and acting on telemetry from your cloud and on-premises environment

126
Q

What is Azure service Health?

A

Information about current and upcoming issues such as service impacting events , planned maintenance, and other changes that may affect your availability

127
Q

What is azure status ?

A

informs you of service outages in Azure

128
Q

What is azure service health?

A

a personalized view of the health of Azure services and regions you’re using

129
Q

What is azure resource health?

A

information about the health of your individual cloud resources

130
Q

What is azure advisor ?

A

It is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments

131
Q

What recommendations does Azure Advisor provide?

A

High Availability, Security, Performance , Cost, Operational Excellence

132
Q

What is SLA for Azure?

A

SLA describes Azure’s commitments for uptime and connectivity

133
Q

Will Azure provide SLAs for free and shared service?

A

No, Azure does not provide them

134
Q

What is a composite SLA?

A

Different services have different SLAs
Composite SLA is when you combine SLAs across different service offerings

135
Q

How to improve the overall SLA ?

A

By using fallback systems like queue to record transactions and process them later when the service is available will help

136
Q

What is TCO calculator?

A

Estimate the cost savings you can realize by migrating your workloads to Azure
generate a detail report and export as a PDF to send to decision makers

137
Q
A
138
Q

What is Azure App Service Autoscaling ?

A

Scaling in and out - increase or decrease no of web servers
Based on load is called Auto scaling as opposed to scaling up and down - increasing memory,cpu power or storage capacity

139
Q

When will autoscaling help?

A

Autoscaling helps when number of requests increase not when resource intense tasks increase

140
Q

What are the possible autoscale conditions?

A

Scale based on a metric such as length of disk queue or the number of HTTP requests awaiting processing or according to a schedule

141
Q

How autoscale action works?

A

Autoscale runs only if all scale-in rules are met or if any of scale-out rules are met

142
Q

How do you enable autoscale in App service?

A

By default, an app service plan implements manual scaling. Selecting custom autoscale reveals condition groups yoy can use to kanage your scale settings

143
Q

What is Azure API Management Service?

A

Azure API management instance acts as an API Gateway . It is positioned between your APIs and Internet

144
Q

What are the features of API Management?

A

API Documentation, Rate Limiting Access, Health Monitoring, Modern formats like JSON, Connections to any API, Analytics, Security, Pricing tiers - that provide different capabilities

145
Q

What are different types of APIs

A

HTTP , WebSocket, GraphQL

146
Q

What are different definitions of APIs

A

OpenAPI, WADL, WSDL

147
Q

What is openAPI Specification?

A

It documents all endpoints and operations for RESTful APIs, and all input and output parameters. Open API was originally called swagger

148
Q

What are some backend Azure resources ?

A

Logic App, App service, Function App, Container App

149
Q

What is the best way to configure multiple apis at a time?

A

Tools like azure cli , azure resource manager or bicep templates or azure powershell can be used

150
Q

What are policies in API management?

A

Policies provide powerful capabilities to change the behavior of an API through configuration. They exist as a collection of statements that are executed sequentially on the request or response of an API

151
Q

What is Product?

A

A product is a collection of APIs. You can assign APIs to more than one product. You assign policies so that your products can have different access rules, usage quotas, and terms of use.

152
Q

How azure cdn works?

A

When user requests a file with specific endpoint, the DNS routes to best performing POP location.If no edge servers in POP has that file , then POP requests file from origin server and caches till TTL sent in the headers from origin server

153
Q

What is point of presence?

A

POP is point of presence . It has edge servers that cache the response from origin servers and provide the response back to users

154
Q

What is CDN profile?

A

A CDN profile is a collection of CDN endpoints. Every endpoint represents a specific configuration of content deliver behavior and access.

155
Q

What is Ignore query string caching?

A

Default option . A CDN POP simply passes thr request and any query strings directly to the origin server on the first request and caches the asset. New requests for the same asset ignores any query strings until the TTL expires

156
Q

What is bypass caching for query strings?

A

Ecah query request from the client is passed directly to the origin server with no caching

157
Q

What is cache every unique URL?

A

Every time a requesting client generates a unique URL, that URL is passed back to the origin server and the response cached with its own TTL . This is inefficient where each request is a unique URL, as the cache-hit ratio becomes low

158
Q

Is there any limit on CDN profiles that can be created?

A

Yes , the number of CDN profiles that can be created is limited by the type of Azure subscription.

159
Q

What is service bus queue?

A

It is designed to integrate applications or application components that may span multiple communication protocols, data contracts, trust domains or network environments

160
Q

What is service bus queue?

A

It is designed to integrate applications or application components that may span multiple communication protocols, data contracts, trust domains or network environments

161
Q

What is a storage queue?

A

Storage queue allows you to store millions of messages upto the total capacity limit of storage account. Queues are commonly used to create a backlog of work to process asynchronously

162
Q

What is Azure Service Bus?

A

It is a message broker service hosted on azure platform . It provides functionality to publish messages to various applications and also decouple the applications. It offered a a secure platform for asynchronous transfer of data and state

163
Q

How azure service bus queue works?

A

In queue, there is 1:1 relationship between sender and receiver. Messages are present in the queue until receiver process and completes the messages. Queue contains secondary sub-queue, called a DLQ automatically gets created . Wheb messages are not delivered to receiver or cannot be processed by receiver , such messages are pushed ti DLQ

164
Q

What is configureAwait?

A

Is used on any Task or Task<> object to configure how the await behaves when awaiting the task. It takes bool parameter called continueOnCapturedContext, which determines whether the continuation after the await should run on the same context as the one started the task

165
Q

What is configureAwait?

A

Is used on any Task or Task<> object to configure how the await behaves when awaiting the task. It takes bool parameter called continueOnCapturedContext, which determines whether the continuation after the await should run on the same context as the one started the task

166
Q

How topics & subscriptions are different from queue?

A

Queue allows processing of a message by a single consumer. Whereas topics&subscriptions provide a one-to-many form of communication in a publish and subscribe pattern

167
Q

How topics and subscriptions work?

A

Publishers send messages to a topic and consumers receive messages from subscriptions of the topic

168
Q

What is messaging unit ?

A

Service Bus premium messaginv provides resource isolation at CPU and memory level so that each customer workload runs in isolation called messaging unit. Each premium namespace is allocated atleast one messaging unit

169
Q

How scaling can be categorized?

A

Preemptive- if additional workload is expected due to seasonability ot trends , you can proceed to allocate more messaging units to the namespace before the workloads hit
Reactive - if additional workloads are identified by studying the resource usage metrics then additional resources can be allocated

170
Q

What is Full Duplex vs half duplex communication?

A

Full duplex - Both send and receive messages simultaneously , Half duplex - either send or receive

171
Q

What is Azure Queue Storage?

A

It is a service for storing large numbers of messages. You can access messages from anywhere in the world via authenticated calls using HTTP or HTTPS. Queues are commonly used yo create a backlog of work to process asynchronously

172
Q

What is Azure Queue Storage?

A

It is a service for storing large numbers of messages. You can access messages from anywhere in the world via authenticated calls using HTTP or HTTPS. Queues are commonly used yo create a backlog of work to process asynchronously

173
Q

What does azure queue setvice contains?

A

Storage Account + Queue

174
Q

Can you changes the contents of a message inplace in a queue?

A

Yes . If the message represents a work task, you could use this feature to update the status of the work task

175
Q

What are managed identities?

A

A common challenge for developers is the management of secrets, credentials, certificates, and keys used to secure communication between services. Managed identities eliminate the need for developers to manage these credentials

176
Q

How do services access azure key vault?

A

Managed Identities provide an automatically managed identity in Microsoft entra ID for services to use when connecting to resources that support Microsoft Entra authentication. Applications or srvicrs can use managed identities to obtain entra tokens without having to manage any credentials

177
Q

What are types of managed identities in Azure?

A

System-assigned managed identities and user-assigned managed identities

178
Q

What are types of managed identities in Azure?

A

System-assigned managed identities and user-assigned managed identities

179
Q

What is a system-assigned managed identity?

A

It is directly tied to azure service instance. After the identity is created, the credentials are provisioned onto the instance

180
Q

What is user assigned managed identity?

A

It is a standalone azure resource. After the identity is created, it can be assigned to one or more azure service instances. The lifecycle of a user-assigned identity us managed seperately from lifecycle of the azure service instance to which it is assigned

181
Q

What are managed identites internally?

A

Internally, managed identities are service principals of a special type, which are locked to only be used with azure resources. When managed identity is deleted, corresponding service principal is automatically removed

182
Q

Give an example for When to use managed identities?

A

If you want to build an app using azure app services that accesses azure storage without having to manage any credentials

183
Q

What is Azure Active Directory?

A

It is a cloud-based identity and access management service

184
Q

What is Azure AD Tenant?

A

Azure AD Tenant is a dedicated and trusted instance of Azure Active Directory that includes your users, groups and applications

185
Q

What is Azure subscription?

A

It is associated to an azure offer , will contain your payment information, scale limits, any policirs abd will be the container for your azure resources

186
Q

What is the relationship between azure active directory instance and azure subscriptions?

A

An azure active directory instance(Azure AD Tenant) can have multiple subscriptions depend on it for authenticate and authorize users , groups, applications. Whereas subscription can trust only on Azure AD Tenant

187
Q

How an app in one Azure AD gets into othet Azure AD?

A

A service principal object is created within the target AD referencing the original app in source AD

188
Q

What happens when you assign a user managed identity to a resource?

A

The resource gets all the access tied to the resources of that user managed identity

189
Q

Is managed identity tied to an application?

A

Managed identity is tied to resource and application running on resource will be authenticated based on the identity created for that resource from Azure AD and receive token

190
Q

Is managed identity tied to an application?

A

Managed identity is tied to resource and application running on resource will be authenticated based on the identity created for that resource

191
Q

How managed identity works?

A

The application makes token request for managed identity endpoint , MI endpoint makes request with the client credentials stored in it to Azure AD. From there , token is sent to the application. Now, this application can make call to other application using token

192
Q

What services are supported by Managed Identities with Azure AD?

A

Virtual Machines , App service, API Management, Container Instances, Container Registery Tasks, Event Hubs, Functions, Kubernetes Service, Logic Apps, Service Bus, Data Factory

193
Q

How managed identity works?

A

The managed identity created for resource needs to be registered with the target in some shape or form

194
Q

What is Azure App Configuration ?

A

It provides a service to centrally manage application settings and feature flags. Use App Configuration to store all the settings for your application and secure their accesses in one place

195
Q

How app configuration is different from Azure Key Vault?

A

App configuration complements Azure Key Vault by centralize management and distribution of hierarchical configuration data for different environments and geographies, dynamically change application settings without the need to redloy or restart an app

196
Q

How to add App configuration store to your application?

A

The easiest way is to add a client library to your code and configure the credentials

197
Q

How does App configuration stores configuration data?

A

It stores data as key-value pairs.

198
Q

What are label keys in Azure App Configuration?

A

Key values in App Configuration can optionally have a label attribute. Labels are used to differentiate key values with the same key. A key with different labels are treated as
Same key. A common use of labels is to specift environments like , appname:dbendpoint&label = Test , appname:dbendpoint&label = Staging

199
Q

Are keys , values encrypted at rest ?

A

Yes keys and values are encrypted at rest and in transit

200
Q

What is feature management?

A

It is modern software-development practice that decouples feature release from code deployment and enables quick changes to feature availability on demand. It uses a technique called feature flags

201
Q

What are feature flag?

A

Feature flag is a variable with a binary state of on or off . It also had an associated code block. The state of feature flag triggers whether the code block runs or not

202
Q

What is a feature manager?

A

A feature manager is ab application package that handles the lifecycle of all the feature flags in an application. It provides extra functionality, such as caching feature flags and updating their states

203
Q

What is a filter in feature management?

A

A filter is a rule for evaluating the state of a feature flag. A user group, a device or browser type, a geographic location, and a time window are all examples of what a filter can represent

204
Q

What does feature flag contain?

A

Each feature flag has name and a list of one or more filters that are used to evaluate if a feature’s state is on

205
Q

Why do you need app configuration?

A

An application configuration settings should be kept external to its executable and read in from its runtime environment or an external source

206
Q

What is Microsoft Authentication Library?

A

It enables developers to acquire tokens from the microsoft identity platform inorder to authenticate users snd access secured web apis

207
Q
A

MSAL can be used to provide secure access to ms graph, own apis etc .within

208
Q

How to get token from client application

A

First the client application needs to be initialized to get token from it using msal library

209
Q

What is azure app configuration?

A

A service for centratization of app configuration and feature management

210
Q

What is access management?

A

Process of controlling, verifying, tracking and managing access to authorized users and applications

211
Q

What is access management?

A

Process of controlling, verifying, tracking and managing access to authorized users and applications

212
Q

How access management works in azure?

A

If a user tries to perform an action on an azure resource , the role assignments against resource and user are checked for privileges and based on that access is given to the user

213
Q

What is active directory domain services?

A
214
Q

What is azure active directory?

A
215
Q

What is azure active directory?

A
216
Q

What is Azure Active Directory Domain Services?

A
217
Q

What is role?

A

Role(role definition) is a collection of actions that the assigned identity will be able to perform

218
Q

What are security principals?

A

Objects in the azure active directory that represent user, group of users , service principals, managed identity . Roles can be assigned to all of these security principals

219
Q

What is security principal?

A

Security Principal is an Azure object(identity) that can be assigned to a role(ex. Users, Groups or Applications)

220
Q

What is subscription?

A

It is a top level billing object

221
Q

What is a management group?

A

It is a group of subscription or management groups

222
Q

What is subscription made up of?

A

It is made up of resource groups

223
Q

What is a scope?

A

A scope is one or more azure resource that access applies to

224
Q

What is a Role assignment?

A

It is a combination of role definition, security principal and scope

225
Q

What is Online Analytical Processing(OLAP) vs Online Transaction Processing (OLTP) ?

A

These are two different data processing systems designed for different purposes. OLAP is optimized for complex data analysis and reporting, while OLTP is optimized for transactional processing and real-time updates

226
Q

What is blob storage?

A

Blob storage us optimized for storing massive amounts of unstructured data. Unstructured data is data that doesn’t adhere ti a particular data model or definition, such as text or binary data

227
Q

What is blob storage designed for?

A

Serving images or documents directly to a browser, storing files , streaming video or audio, writing to log files etc

228
Q

How objects in azure blob storage can be accessed?

A

Objects are available via Azure Storage REST API, Azure PowerShell, Azure CLI, or an Azure Storage Client Library

229
Q

What are azure blob storage resource types?

A

Blob storage offers 3 types of resources
The storage account
A container in the storage account
A blob in a container

230
Q

What is a storage account?

A

A storage account provides a unique namespace in Azure for your data. Every object that you store in Azure storage has an address that includes your unique account name

231
Q

What is a container?

A

A container organizes a set of blobs, similar to a directory in a file system. A storage container can include an unlimited number of containers, and a container can store an unlimited number of blobs

232
Q

What types of blobs are supported by Azure storage?

A

Azure storage supports 3 types of blobs
Block blobs - store text and binary data
Append blobs - are made up of block blobs but optimized for append operations like logging data
Page blobs - store random access files upto 8TB. Page blobs store Virtual hard drive (VHD) fules and serve ad disks fir Azure virtual machines

233
Q

What is change feed in Azure Cosmos DB?

A

It is a persistent record of changes to a container in the order they occur. These changes can be processed asynchronously and incrementally, and the output can be distributed across one or more consumers for parallel processing

234
Q

How change feed for a container can br processed?

A

It is available for partition key ranged of an Azure Cosmos DB Container. This allows it to be distributed across one or more consumers for parallel processing

235
Q

What is the guarantee of change feed order?

A

Items come in the order of their modification time. This sort order is guaranteed per partition key and there’s no guaranteed order across the partition key values

236
Q

How does the change feed in multi-region Azure Cosmos DB accounts?

A

In a multi-region Azure cosmos DB account, changes in one region are available in all regions. There is no guarantee of when changes will be available. Incoming changes to the same document may be dropped in latest version mode if there was a more recent change in another region, all changes will be captured in all versions and deletes mode

237
Q

What are the change feed modes available?

A

Latest version mode and all versions and deletes mode

238
Q

Is it possible to have different change modes across multiple applications for the same Azure cosmos DB container?

A

Yes , change feed can be consumed in different modes for multiple applications for the same azure cosmos db container

239
Q

What is latest version mode?

A

In Latest version change feed mode, you see the latest change from an insert or update for all items in the feed, and the feed is available for the life of rhe container

240
Q

Can we determine the change type for latest version change feed mode?

A

No , there is no indication whether a given change is from an insert or an update operation, and deleted aren’t captured. Changes can be read from any point in time as far back as the origin of your container. However, if an item is deleted it’s removed from the change feed

241
Q

What is All versions and deletes mode?

A

All versions and deletes mode allows you to see all changes to items from created, updated and deletes.

242
Q

What is Azure Event Grid?

A

It is a highly scalable, fully managed pub sub message distribution service that offers flexible message consumption patterns using HTTP and MQTT protocols.

243
Q

What does Azure Event Grid do?

A

Using this, we can build data pipelines with device data, integrate applications, and build event-driven serverless architecturrs

244
Q

What delivery does event grid support?

A

It can be configured to send events to subscribers(push delivery) or subscribers can connect to Event Grid to read events(pull delivery)

245
Q

What delivery does event grid support?

A

It can be configured to send events to subscribers(push delivery) or subscribers can connect to Event Grid to read events(pull delivery)

246
Q

What is a publisher?

A

An application that sends events to Event Grid. It can be the same application where the events originated, the event source.

247
Q

What services can publish events to event grid?

A

Azure services publish events to event grid to anouncr an occurrence in their service. You can publish events from your own application hosted in or outside azure

248
Q

What is a partner?

A

It is a kind of publisher that sends event from its system to make them available to Azure customers. Partners not only can publish events but can also receive events

249
Q

What is an event?

A

An event is the smallest amount of information that fully describes something that happened in a system in a JSON format having source, time, type etc properties

250
Q

What is an event source?

A

An event source is where the event happens. Each event source is related to one or more event types

251
Q

What are topics?

A

A topic holds events that have been published to Event Grid. A topic is used for a collection of related events

252
Q

What are system topics?

A

These are built in topics provided by azure services. Publisher owns the topics

253
Q

What are custom topics?

A

These are application and third-party topics. You can see them in your subscription

254
Q

What are custom topics?

A

These are application and third-party topics. You can see them in your subscription

255
Q

What are partner topics?

A

These are used to subscribe to events published by a partner.

256
Q

What are partner topics?

A

These are used to subscribe to events published by a partner.

257
Q

What are event subscriptions?

A

A subscription tells Event Grid which events on a topic you’re interested in receiving. When creating the subscription, you provide an endpoint for handling the event

258
Q

What are event handlers?

A

From an event grid perspective, an event handler is the place where the event is sent. The handler takes some further action to process the event

259
Q

What are handler types supported in Event Grid?

A

Azure service or custom webhook can be used as handlers. Depending on the type of handler, event grid follows different mechanisms to guarantee the delivery of the event

260
Q

What security is provided by Event Grid?

A

It provides security for subscribing to topics and when publishing events to topics. When subscribing, you must have adequate permissions on event grid topic.

261
Q

Will Event grid provide durable delivery?

A

Yes, it tries to deliver each event at least once for each matching subscription immediately. If a subscriber’s endpoint doesn’t respond, event grid retries delivery based in fixed retry schedule and retry policy

262
Q

Will event grid retry for every error for an event delivery attempt?

A

No, if the error returned by the subscribed endpoint is a configuration-related error that can’t be fixed with retries, event grid will either perform dead-lettering on the event or drop the event if dead-letter isn’t configured

263
Q

How retry policy works?

A

Retry policy can be customized when creating an event subscription by using Maximum number of attempts - 1 to 30 , Event time-to-live(TTL) - 1 to 1440

264
Q

Does Event grid use Azure Role-Based Access Control?

A

Yes , azure allows to control the level of access given to different users to do management operations such as post event subscriptions, create nee ones, and generate keys

265
Q

Can we receive events by using webhooks?

A

Webhooks are one of the many ways to receive events from Azure Event Grid. When a new event is ready, event grid service POSTs an HTTP request to the configured endpoint with yhe event in the request body