Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Cool Vocab > Azure Flashcards > Flashcards

Azure Flashcards

1
Q

What is the name of the connection to servers on the cloud (replaced RDP)?

A

Bastion

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the nickname for the virtual network?

A

Vnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the cloud name for the VPN connection?

A

ExpressRoute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the connection between offices that is setup in Azure?

A

Virtual WAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the site to site or point to site (home for example) that replaces VPN?

A

VPN Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Term for connecting multiple Azure networks together?

A

Peering - note that when setup, they are off by default for security (Denied by default).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Term for DNS?

A

Azure DNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is NSG?

A

Network Security Groups are an access control config.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a way to implement a public link to the cloud?

A

Azure Private Link- makes public endpoints private. (more info later, of course).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

DDoS Protection

A

This is free by default, you can upgrade it for cost.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Azure Frewall, Web Application Firewall

A

WAF is built into the Application Gateway product. Recognizes common attacks (crosssite scripting, SQL injection, for example).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is CDN?

A

A content delivery network is a distributed network of servers that can efficiently deliver web content to users. A content delivery network store cached content on edge servers in point of presence (POP) locations that are close to end users, to minimize latency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Virtual Network Enpoints (used with VNet)

A

Virtual Network (VNet) service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network. Endpoints allow you to secure your critical Azure service resources to only your virtual networks. Service Endpoints enables private IP addresses in the VNet to reach the endpoint of an Azure service without needing a public IP address on the VNet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Azure Front Door

A

Another form of load balancing, I believe it uses DNS to dirstribute traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Application Gateway vs Load Balancer

A

App Gateway is application level load balancer, where as the Load Balancer is closer to core network traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Name the monitoring services with Azure. Not just performance, but what if someone can’t connect, where is the point of failure?

A

Network Watcher, ExpressRoute Monitor,
Azure Monitor
VNet Terminal Access Point (TAP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the most common way to access Azure?

A

Azure Portal; portal.azure.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Identity

A

An identity is an object that can be authenticated. The identity can be a user with a username and password. Identities can also be applications or other servers that require authentication by using secret keys or certificates. Microsoft Entra ID is the underlying product that provides the identity service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Account

A

Account An account is an identity that has data associated with it. To have an account, you must first have a valid identity. You can’t have an account without an identity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Microsoft Entra Account

A

A Microsoft Entra ID account_ is an identity that’s created through Microsoft Entra ID or another Microsoft cloud service, such as Microsoft 365. Identities are stored in Microsoft Entra ID and are accessible to your organization’s cloud service subscriptions. The Microsoft Entra account is also called a work or school account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Azure tenant (directory)

A

An Azure tenant is a single dedicated and trusted instance of Microsoft Entra ID. Each tenant (also called a directory) represents a single organization. When your organization signs up for a Microsoft cloud service subscription, a new tenant is automatically created. Because each tenant is a dedicated and trusted instance of Microsoft Entra ID, you can create multiple tenants or instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Azure Subsription

A

An Azure subscription is used to pay for Azure cloud services. Each subscription is joined to a single tenant. You can have multiple subscriptions.

23
Q

Entra ID

A

First native cloud identity management (replaced Azure AD). Lots of advanced features disabled in free version. Most comprehensive is the $9 per user subscription.

24
Q

What is the cloud anti-virus?

A

MS Defender

25
Q

Name 2 special features for advanced user management.

A

Dynamic group assignment, user expiration of group membership.

26
Q

What is an advanced features available with free Entra?

A

Synchronize AD identities with Entra ID using cloud synch or connect synch.

27
Q

What is write back, for Entra?

A

When a user resets their password, it synchs back to the on premise AD.

28
Q

Conditional access, Entra feature

A

Monitors a user and determines if their risk is acceptable, such as logging on with an old version of IOS, etc.

29
Q

What are the basic areas of accounts and subscriptions?

A

Account, Tenant, Subscription, Resource Group

30
Q

Describe account

A

Email address of a user or application. App is called a Managed identity (service account). Users use multi-factor identification.

31
Q

Describe Tenant

A

A representation of an organization, similar to a namespace; noone else can use @example.com.

32
Q

Describe subscription

A

Free, pay as you go, enterprise agreements. Subscriptions can be assigned to a tenant. Tenants can have more than one subscription.

33
Q

Azure AD B2C

A

This is a ‘business to consumer’ account. This is the lowest subscription tentant option. It means a third party is used to authenticate, such as LinkedIn or Facebook, Google, etc is used to authenticate/login to Azure. One must own a paid license to create an Entra ID tentant. A paid account is different than a subscription.

34
Q

What is the full access (or old ‘domain admin’) account for Azure?

A

Global Administrator. In order to grant full permissions (and you are in say, your companies tenant), you will have to create your own tentant, and as the owner, you can be a Global Administrator.

35
Q

What allows Entra to enable the feature where an admin only has control over specific objects (users, computers etc)

A

Administrative Units allow you to assign a role, say helpdesk role, but then you can add groups to restrict the scope of the role.

36
Q

What are Azure permissions called?

A

Role Based access control. Admin configures or defines a handful of roles accross your orgainization. Permissions are assigned at the role level, not the user level.

37
Q

What are the 3 main roles for a storage resource?

A

Owner, contributor, reader (equates to full access, read/write access, read only access). Owner can assign permissions. As an admin, I would need also need these access to ‘Storage Blob’ which are the containers. Data permissions are separate from the resource permissions.

38
Q

How does Azure deal with permission conflicts/differences?

A

Instead of the most restrictive, it merges the permissions.

39
Q

What are the parameter settings of a VM or other resuources called (allowing to set limits, for example on the size created)?

A

SKUs (Stock Keeping Unit) which is a sales term. Used in creating a Cost Management Policy (by saying 2 processor servers only, for example).

40
Q

Where do you find if someone got greedy and created a VM in Dev beyond the limits set?

A

Compliance (report). Note that compliance policies don’t prevent the resource from being created, just sends a complinace policy violation alert.

41
Q

What is a BLOB

A

Stands for Binary Large Object, and refers to a cloud storage account in binary form that does not conform to a drive format.

42
Q

Name/value pairs that allow you to group resources into consolidated view billing catagories.

A

Tags. Can add all sorts of info too, contact info, billing code, phone number, location etc, then add the tag to whatever resource you choose. Good for report queries.

43
Q

Why create multiple subscriptions?

A

Departments might pay for their own resources within your tenant. Or, it could be as simple as having 2 credit cards, or a new billing account for a company (tenant).

44
Q

Describe a blueprint

A

It is a template for you Entra ID tenant structure. If you need to create a new one, all permissions, resource groups, policies, billing, etc etc are recreated.

45
Q

What is needed to set a storage blob to push files to a back up storage?

A

Object Replication - This replication is asynchronous and there is no SLA for how long it will take.

46
Q

How to get mass data into or out of Azure?

A

Create an import job or an export job, or if very large, the subscribe to a Data Box where they send a USB drive.

47
Q

What is the powershell format to move data from one container to the other?

A

.\azcopy copy [source blob with SAS] [destination blob with SAS]

Go to container and hit (copy) near SAS area.

48
Q

What are the different levels or types of storage accounts?

A

Azure blobs (objects), Azure Data Link (huge amount), Azure files, Azure queues, Azure tables. Need Premium account for high performance, or Standard if low performance is acceptable.

49
Q

What feature would you use to replicate a local file server to Azure cloud?

A

Azure File Synch - Download the Azure File Synch Agent to the file server, then register the server with the storage synch Service. Synch does not mean all directories.

50
Q

Along with other properties such as expiration or revocation, how is SAS most secure?

A

Use a user delegation SAS when possible delegation SAS provides superior security service SAS or an account SAS user delegation SAS is secured with Microsoft credentials so that you do not need to store your account key with your code

51
Q

What is a datalink?

A

I think it can be best described as a connection to the data. Containers need to have a DNS entry for example. It’s the feature that enables web access from the outside.

52
Q

What is ARM?

A

Azure Resource Manager, where you can create templates so you or others can create resources including VMs with a standard configuration. Java Script Object Notation JSON - Can also use the Bicep language

53
Q

What is the feature that allows you to scale up or out when your application processing increases?

A

Autoscale. Remember that when you have a scale out setting, for example, make sure you have a scale in setting for when the processor returns to say less than 30%. You can also change the scale up (out too?) setting to manual.

Cool Vocab (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions