Azure Fundamentals Training Day Flashcards

1
Q

Regions

A

Made up of one or more datacenters in close proximity for hosting Azure services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Agility

A

Deploying and configuring cloud-based resources quickly as business requirements change

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Availability Zones

A

Physically separate datacenters within the same region
Provide protection against downtime due to datacenter failure
Each datacenter is equipped with independent power, cooling, and networking
Connected through private fiber-optic networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Region Pairs

A

Allow the replication of Azure resources across geographies to help ensure that a secondary region is available in case of any disaster at the primary region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Azure Sovereign Regions

A

Separate instance of Azure, physically isolated from non-US government deployments
Accessible only to screened, authorized personnel
Meets the security and compliance needs of US federal agencies, state and local government

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Azure China

A

All data stays within China to ensure compliance
Physically separated instance of Azure cloud services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

___ can only be associated with a single subscription

A

Resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Resource Group

A

Logical container used to combine and organize Azure resources
Resources can only exist in one resource group
Resources can exist in different regions
Resources can be moved to different resource groups
Applications can utilize multiple resource groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is an Azure Storage account named storage001 an example of?

A

A resource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Azure Subscription

A

Provides you with authenticated and authorized access to Azure accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Billing Boundary

A

Generate separate billing reports and invoices for each subscription

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Access Control Boundary

A

Manage and control access to the resources that users can provision with specific subscriptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Management Groups

A

Used to manage multiple Azure subscriptions at scale, including their access, policies, and compliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

VM Scale Sets

A

Provide a load-balanced opportunity to automatically scale resources; scale out when resource needs increase, scale in when needs are lower

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

VM Availability Sets

A

Groups VMs into three domains so that if power or network fails in one domain, VMs are still available from another domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Azure Container Instances

A

Allows you to deploy containers in Azure without having to provision or manage any underlying infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Azure Container Apps

A

Fully managed serverless container service for building and deploying modern apps at scale

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Azure Kubernetes Service

A

An orchestration service for containers with distributed architectures and large volumes of containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Azure Functions

A

PaaS offering that supports serverless compute operations. Event-based code runs when called without requiring server infrastructure during inactive periods

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Azure App Services

A

Fully managed platform to build, deploy, and scale web apps and APIs quickly.
Works with .NET, .NET Core, Node.js, Java, Python, or php

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Azure Virtual Network (VNet)

A

Enables Azure resources to communicate with each other, the internet, and on-premises networks
Can be used for public or private access, virtual subnets, or network peering to connect private networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

ExpressRoute

A

Extends on-prem networks into Azure over a private connection that is facilitated by a connectivity provider

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Azure DNS

A

Host and manage DNS domains or DNS zones through Azure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Storage Accounts

A

Must have a globally unique name
Provides over-the-internet access worldwide
Determine storage and redundancy options

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

LRS

A

Locally redundant storage
Single datacenter in primary region
11 nines durability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

ZRS

A

Zone redundant storage
Three availability zones in the primary region
12 nines durability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

GRS

A

Geo redundant storage
Single datacenter in the primary and secondary region
16 nines durability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

GZRS

A

Geo zone redundant storage
Three availability zones in the primary region and a single datacenter in the secondary region
16 nines durability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Azure Blob

A

Optimized for storing massive amounts of unstructured data, such as text or binary data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Azure Disk

A

Provides disks for VMs, applications, and other services to access and use

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Azure Queue

A

Message storage service that provides storage and retrieval for large amounts of messages, each up to 64KB
Commonly used to create a backlog of work to be accessed asynchronously

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Azure Files

A

Sets up a highly available network file share that can be accessed using the SMB protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Azure Tables

A

Provides a key/attribute option for structured non-relational data storage with a schema-less design

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Azure storage tier optimized for frequently accessed data

A

Hot

35
Q

Azure storage tier optimized for storing data accessed infrequently and stored for at least 30 days

A

Cool

36
Q

Azure storage tier optimized for storing data accessed infrequently and stored for at least 90 days

A

Cold

37
Q

Azure storage tier optimized for storing data accessed rarely and stored for at least 180 days with flexible latency requirements

A

Archive

38
Q

Early removal of data from access tiers with storage requirements will result in ____

A

Fees

39
Q

Azure Migrate

A

Unified migration platform with a range of integrated and standalone tools. Performs assessment and migration of on prem datacenters to Azure

40
Q

Azure Data Box

A

Store up to 80 TB of data to move disaster recovery backups to Azure.
Protects data in a rugged case during transit.
Migrate data out of Azure for Compliance or regulatory needs
Migrate data to Azure from remote locations with limited or no connectivity

41
Q

AzCopy

A

Command line utility
Copy blobs or files to or from your storage account
One-direction synchronization

42
Q

Azure Storage Explorer

A

GUI compatible with Windows, MacOS, and Linux. Uses AzCopy to handle file operations

43
Q

Azure File Sync

A

Synchronizes Azure and on-prem Windows File Server in a bi-directional manner.
Cloud tiering keeps frequently accessed files local, while freeing up space
Rapid reprovisioning of failed local server (install and resync)

44
Q

Microsoft Entra ID

A

Azure’s cloud-based identity and access management service. Handles:
Authentication
SSO
Application management
Business to Business
Device management

45
Q

Microsoft Entra Domain Services

A

Cloud based domain services without managing domain controllers
Run legacy applications (that can’t use modern auth standards) in the cloud
Automatically sync from Microsoft Entra ID

46
Q

Microsoft Entra External ID B2B

A

A method to securely grant access to your resources with external partners, vendors, suppliers, or other collaborators.

47
Q

External Identities B2C

A

Allows customers/consumers of your app to sign up and sign in to utilize it
Automatically reacts to DoS and password spraying activities

48
Q

Conditional Access

A

Used to bring signals together, to make decisions, and enforce organizational policies. Based on:
User or Group Membership
IP Location
Device
Application
Risk Detection

49
Q

Azure RBAC

A

Role Based Access Control - applied to a scope (resource or set of resources the access applies to)
Enforces principle of least privilege by granting permissions that are appropriate for user’s role, nothing more

50
Q

How many pre-built RBAC roles are available in Azure?

A

70

51
Q

Owner Role

A

Grants full access to manage all resources, including the ability to assign roles in Azure RBAC

52
Q

Contributor Role

A

Grants full access to manage all resources, but does not allow role assignment in RBAC

53
Q

Reader Role

A

View all resources, but does not allow you to make any changes

54
Q

RBAC Administrator

A

Manage user access to Azure resources
Assign roles in RBAC
Assign themselves or others the Owner role
Can’t manage access using other ways, such as Azure Policy

55
Q

User Access Administrator

A

Manage user access to Azure resources

56
Q

Microsoft Defender for Cloud

A

Monitoring service that provides threat protection across both Azure and on-prem datacenters
Provides security recommendations
Detect and block malware
Analyze and identify potential attacks
Just-in-time access control for ports

57
Q

Azure Security Benchmark

A

Defender for Cloud feature that compares your environment to security best practices and makes recommendations to enhance security
Based on widely accepted compliance frameworks

58
Q

Factors Affecting Cost

A

Resource-Specific Costs
Consumption - pay-as-you-go
Maintenance- monitoring Azure footprint and mitigating costs that aren’t necessary
Geography- different costs per region
Network Traffic- outbound data or data between Azure resources is impacted by billing zones
Subscription

59
Q

Azure Marketplace

A

Allows customers to find, try, purchase, and provision applications and services from hundreds of leading service providers.

60
Q

Pricing Calculator

A

Tool that helps you estimate the cost of Azure products with configuration options like region, tier, etc

61
Q

TCO Calculator

A

Total Cost of Ownership
Allows prospective Azure customers to calculate cost of migration to Azure

62
Q

Azure Cost Management

A

Allows you to create and manage cost and usage budgets by monitoring resource demand trends, consumption rates, and cost patterns
Also allows you to use historical data to generate reports and forecast future usage and expenditures

63
Q

Tags

A

Provides metadata for your Azure resources. Offers custom grouping of resources based on tags
Logically organizes resources into a taxonomy
Consists of a name-value pair (example- owner: joe)

64
Q

Microsoft Purview

A

Family of data governance, risk, and compliance solutions that helps you get a single, unified view into your data
Automated data discovery
Sensitive data classification
End-to-end data lineage

65
Q

Azure Policy

A

Azure service that enables you to create, assign, and manage policies that control our audit resources. These policies enforce different rules across all resource configurations so they stay compliant with corporate standards.

66
Q

Resource Locks

A

Protect your Azure resources from accidental deletion or modification
Manage locks at subscription, resource group, or individual resource levels within Azure Portal

67
Q

Service Trust Portal

A

Publicly accessible website where Microsoft publishes audit reports- “built on a foundation of trust, security, and compliance”

68
Q

Azure Portal

A

GUI for interacting with Azure

69
Q

Azure Cloud Shell

A

Web based shell for interaction with Azure resources

70
Q

Azure PowerShell

A

Uses commandlets to perform administrative tasks on Azure resources

71
Q

CLI

A

Command Line Interface; similar capabilities as PowerShell for performing administrative tasks on Azure resources, however uses Bash

72
Q

Azure Resource Manager (ARM)

A

The deployment and management service for Azure that enables you to create, update, and delete resources in your Azure subscription

73
Q

ARM Templates

A

JSON files that define an application’s infrastructure requirements for a repeatable deployment that is done in a consistent manner.
A validation step ensures that all resources can be created in the proper order based on dependencies, in parallel, and without being altered

74
Q

Bicep

A

Language/syntax for ARM template creation

75
Q

Azure Arc

A

Multi-cloud and on-prem management platform
Lets you manage Windows and Linux physical servers and VMs hosted outside of Azure, on your corporate network, or other cloud provider

76
Q

Azure Advisor

A

Analyzes account usage and makes recommendations based on its set and configured rules
Recommendations can help improve reliability, security, and performance, achieve operational excellence, and reduce costs

77
Q

Azure Service Health

A

Provides details of planned maintenance and service outages, including official incident reports called root cause analysis which can be shared with stakeholders

78
Q

You need to allow resources on two different Azure virtual networks to communicate with each other. What should you configure?

A

Peering

79
Q

Service Endpoints

A

Used to expose Azure services to a virtual network, providing communication between the two

80
Q

NSGs

A

Network Security Groups
Allow you to configure inbound and outbound rules for virtual networks and virtual machines

81
Q

Which two services can you use to establish network connectivity between an on-prem network and Azure resources?

A

Azure VPN Gateway
ExpressRoute

82
Q

Application Insights

A

Feature of Azure Monitor that allows you to monitor running applications, automatically detect performance anomalies, and use built-in analytics tools to see what users do on an app

83
Q

Azure Monitor

A

Platform for collecting, analyzing, visualizing, and alerting based on metrics. Can log data from an entire Azure and on-prem environment.