Azure - questions Flashcards
What is the best scenario for using Azure ExpressRoute?
A) Extending a VLAN to Azure using ExpressRoute
B) Connecting your on-premises networks into the Microsoft cloud over a private connection with the help of a connectivity provider
C) Connecting your on-premises networks into the Microsoft cloud over the public internet with the help of a connectivity provider
D) Connecting your on-premises networks into the Microsoft cloud over a private connection without a connectivity provider
ANSWER: B
ExpressRoute lets you extend your on-premises networks into the Microsoft cloud over a private connection with the help of a connectivity provider. With ExpressRoute, you can establish connections to Microsoft cloud services, such as Microsoft Azure and Microsoft 365.
Which of the following is a function of an Azure VPN Gateway?
A) To manage the IP addresses for an Azure Subscription and ensure only secure traffic is allowed
B)To make sure the connection from a virtual network to the internet is secure
C)
To send encrypted traffic between an Azure Virtual Network and an on-premises location over the public internet
D)
To handle any suspicious activity trying to access your Azure subscription
E) To balance data coming into your Azure services from an external private network
ANSWER: C
A VPN gateway is an important part of a hybrid Azure infrastructure. It allows encrypted traffic to flow between on-premises services and Azure services.
How do resources on Azure use a virtual network?
A) All resources must be connected to a virtual network to use the Azure platform.
B) All Azure resources that communicate with the public internet must be on a virtual network.
C) Resources on a free account don’t have to be on a virtual network to use Azure.
D) Azure Virtual Network enables Azure resources to securely communicate with each other, the internet, and on-premises networks.
ANSWER: D
Many resources used in Azure don’t need to be connected to a virtual network, especially if they don’t natively integrate with closely with virtual machines. Think of an Azure function, which we looked at in the previous chapter. It can communicate directly onto the internet and doesn’t necessarily need to be part of a virtual network (although this is possible).
Azure Virtual Network enables Azure resources to securely communicate with each other, the internet, and on-premises networks. Key scenarios that you can accomplish a virtual network include: communication of Azure resources with the internet, communication between Azure resources, communication with on-premises resources, filtering network traffic, routing network traffic, and integration with Azure services
What is an address space on a virtual network?
A) A definition of what types of resources can connect to either a private or public network hosted on Azure
B) A reserved number of public IP addresses that you can use to connect a virtual network to the public internet
C) A range of IP addresses that can be assigned to resources attached to the virtual network
D)
A portion of the complete address space for a given Azure subscription that can be assigned to a virtual network
ANS: C
An address space on a virtual network is a number of IP addresses that are unique only on the specific virtual network. These IP addresses are assigned to resources connected to the VNet, which allows the resources to interact and communicate. There is no limit to the number of VNets you can have, nor on the number of address spaces.
Which benefits does adding a load balancer provide? Choose 3
A) When a virtual disk is running low on space on a virtual machine (but not low enough to cause the VM to be unhealthy), the incoming data can be preemptively redirected to another virtual machine to manage the load.
B) A load balancer can log traffic that passes through it.
C) When there is too much incoming network traffic for a single VM to handle, a load balancer can distribute the load to many VMs.
D) A load balancer ensures only healthy servers process requests.
E) A load balancer ensures the load is evenly distributed between two to five virtual machines only.
ANS: B, C, D
A load balancer sits in front of two or more virtual machines to manage, and balance, the load to the virtual machines. This can be based on amount of incoming traffic or specific properties in the traffic. A load balancer has nothing to do with virtual disks, and the max number of VMs to manage goes up to 1,000. A load balancer ensures only healthy instances receive traffic and will stop sending traffic to any server that does not pass health checks. All Azure load balancers can log traffic that passes through them.
Why would you use a content delivery network? Choose 2
A) For incoming traffic, to make routing decisions based on additional attributes of an HTTP request, such as URI path or host headers
B) To ensure requests made from users are securely handled and served
C) To ensure maximum uptime for an application that is hosted in more than one datacenter
D) To provide better performance and improved user experience for end users
E) To better handle instantaneous high loads, such as the start of a product launch event
ANS: D, E
A CDN keeps a recent copy of your web application and can deliver this much faster to users close to an endpoint. CDNs can handle a lot more data than a typical web server, which makes it ideal to handle traffic spikes as well. CDNs don’t generally handle individual traffic routing rules, nor security.
What are valid managed disk storage types on Azure? (Choose 3)
A) Premium HDD
B) Slow HDD
C) Premium SSD and Standard SSD
D) Premium Disk
E) Ultra Disk
F) Standard HDD
ANS) C, E,F
Slow HDD does not exist. Hard disk drives are slower than their solid state counterparts by definition. We also know Microsoft would be very unlikely to call one of their products “slow.”
Premium Disk does not exist.
Azure offers four types of manage disk storage: Standard HDD, Standard SSD, Premium SSD, and Ultra Disk.
What is the MINIMUM number of data copies created with any Azure Storage redundancy option?
A) 2
B) 1
C) 0
D) 3
ANS) D
When would you want to use Azure Data Box to transfer data to Azure Storage? (Choose 3)
A) Transferring on-premises servers to Azure
B) Transfer a very large amount of data
C) Limited network bandwidth
D) Regulatory compliance when data cannot travel over the internet
B, C, D
Azure Data Box is ideal for transferring extremely large amounts of data.
Azure Data Box is ideal for large data transfers when limited network bandwidth is available.
Data Box is an offline transfer method. If you need to transfer sensitive data that cannot travel over the internet, this is an ideal solution.
What significance does the name of your Azure storage account have?
A) Each storage account name is linked to a set of users that can access it.
B)
The combination of the storage account name and the Azure Storage service endpoint forms the endpoints for your storage account. Your storage account name must be unique within Azure.
C) No significance. You can name a storage account what you want.
D) The name you give the storage account becomes the main web address for accessing the files in it. It must be unique within your Azure subscription.
B
A storage account provides a unique namespace in Azure for your data. Every object you store in Azure Storage has an address that includes your unique account name. The combination of the account name and the Azure Storage service endpoint forms the endpoints for your storage account. Your storage account name must be unique within Azure. No two storage accounts can have the same name
When choosing between Azure Storage redundancy models, what is the difference between locally redundant storage (LRS) and zone-redundant storage (ZRS)?
A) LRS is in a single region. ZRS is redundancy between two paired regions.
B) LRS is across two paired regions, with each region hosting replicated copies in a single zone. ZRS is also across paired regions, but the primary region replicates data across multiple availability zones.
C) LRS is in a single region and single zone. ZRS is also in a single region but across multiple availability zones.
D) LRS is in a single region but across multiple availability zones. ZRS is also in a single region but replicated in a single zone.
C
LRS is single-region redundancy with three data copies in a single zone/datacenter. ZRS is also single-region redundancy but with three copies across three separate availability zones in the same region.
Which types of blobs are supported by Azure Storage?
A) Fast blob
B) Block blob
C) File blob
D) Standard blob
E) Page blob
F) Append blob
B, E, F
Block blobs are used for handling large amounts of data very effectively.
Page blobs are used for random read/write operations. Picture this like the computing equivalent of having a scrap piece of paper (or “page”) on your desk to scribble notes on that you only need for temporary periods of time.
Append blobs are used for operations where you are appending new data to existing content, rather than replacing it. Picture this like a log that you’re constantly adding to.
What is a suitable use case for the Azure Files storage service?
A)
Provide temporary file storage for a web application.
B) Store files larger than 2 GB.
C) Replace or supplement on-premises file servers.
D) Archive large amounts of data.
C
Azure Files can be used to completely replace or supplement traditional on-premises file servers or NAS devices. Popular operating systems such as Windows, macOS, and Linux can directly mount Azure file shares wherever they are in the world. SMB Azure file shares can also be replicated with Azure File Sync to Windows Servers, either on-premises or in the cloud, for performance and distributed caching of the data where it’s being used