Azure Fundamentals Flashcards
What is the purpose of defense in depth?
The objective of defense in depth is to use several layers of protection to prevent information from being accessed or stolen by unauthorized users.
What is conditional access?
Conditional Access is a tool that Microsoft Entra uses to allow or deny access to resources based on identity signals.
What is Microsoft Entra?
Microsoft Entra supports the registration of devices.
What is SSO?
SSO enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.
What is Azure RBAC?
Azure RBAC allows you to assign a set of permissions to a user or group.
What are resource tags?
Resource tags are used to locate and act on resources associated with specific workloads, environments, business units, and owners.
What are resource locks?
Resource locks prevent the accidental change or deletion of a resource.
What is Azure Key Vault?
Key Vault is a centralized cloud service for storing an application secrets in a single, central location.
Where is Azure RBAC applied?
An Azure RBAC role is applied to a scope, which is a resource or set of resources that the access applies to.
Which two services are provided by Microsoft Entra?
Authentication, SSO
You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure.
What should you use to assist you?
The TCO Calculator helps you estimate the cost savings over time of operating a solution in Azure compared to operating in an on-premises datacenter.
What is Azure Pricing Calculator?
The Azure Pricing calculator allows you to estimate and configure according to your specific requirements. You will then receive a consolidated estimated price and a detailed breakdown of the costs associated with each resource you added to your solution.
Which two features are available by using Azure Cost Management + Billing?
Azure Cost Management allows you to create and manage cost and usage budgets by monitoring resource demand trends, consumption rates, and cost patterns. It also allows you to use historical data to generate reports and forecast future usage and expenditures.
Azure Policy
Azure Policy can help to create a policy for allowed regions, which enables you to restrict the deployment of virtual machines to a specific location.
Azure Policy enables you to define both individual policies and groups of related policies called initiatives. Azure Policy evaluates your resources and highlights resources that are not compliant with the policies you created. Azure Policy can also prevent noncompliant resources from being created.
Azure Portal
The Azure portal provides a GUI to view all the services you are using, create new services, configure your services, and view reports.
What can you use to define the resources you want to provision in a declarative JSON format?
By using ARM templates, you can describe the resources you want to use in a declarative JSON format.
Azure Advisor
Azure Advisor analyzes the account usage and makes recommendations based on its set and configured rules.
Azure CLI
Azure CLI allows you to use the Bash shell to perform administrative tasks. Bash is used in Linux environments, so a Linux administrator will probably be more comfortable performing command-line administration from Azure CLI.
Azure Application Insights
Application Insights is a feature of Azure Monitor that allows you to monitor running applications, automatically detect performance anomalies, and use built-in analytics tools to see what users do on an app.
Azure Service Health
Service Health notifies you of Azure-related service issues, such as region-wide downtime.
Data Catalog
This enables data discovery
Data Sharing
This shares data within and between organizations
Data Estate Insights
This accesses data estate health
Data Policy
This governs access to data
Azure Resource Manager (ARM)
ARM is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in an Azure account.
Application Insights (Azure Monitor)
Application Insights is a feature of Azure Monitor that allows you to monitor running applications, automatically detect performance anomalies, and use built-in analytics tools to see what users do on an app.