Azure Study Material Flashcards

1
Q

What does GZRS stand for?

A

GEO-ZONE REDUNDANT STORAGE

Copies your data synchronously three times within the primary region using ZRS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How does GZRS handle redundancy in the secondary region?

A

It copies the data asynchronously to a single physical location in the secondary region.

Recommended by MSFT for apps requiring high availability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the benefit of using GZRS along with GRS?

A

With GRS and GZRS, redundancy is extended to the secondary region!

Options within

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

LRS

A

Locally Redundant Storage

Copies your data synchronously three times within a single physical location in the primary region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

ZRS

A

Zone Redundant Storage

Copies your data synchronously across three Azure availability zones in the primary region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does GRS stand for?

A

Geo-Redundant Storage

Copies your data synchronously three times within a single physical location in the primary region using LRS. It then copies it asynchronously to a single physical location in the secondary region. 3 copies using LRS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How does GRS store data?

A

It copies your data synchronously three times within a single physical location in the primary region using LRS. It then copies it asynchronously to a single physical location in the secondary region. 3 copies using LRS

Copies your data synchronously three times within a single physical location in the primary region using LRS. It then copies it asynchronously to a single physical location in the secondary region. 3 copies using LRS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is AzCopy?

A

A command-line utility that you can use to copy blobs or files to or from your storage account.

1:33:10 / 2:30:51 • DOMAIN 2.3 Describe Azure Storage Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Azure Storage Explorer?

A

A standalone app that provides a graphical interface to manage files and blobs in your Azure Storage Account. Supports file and blob upload, download, or move between accounts.

1:33:10 / 2:30:51 • DOMAIN 2.3 Describe Azure Storage Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Azure File Sync?

A

A tool that lets you centralize your file shares in Azure Files and keep the flexibility, performance, and compatibility of a Windows file server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What happens once Azure File Sync is installed on a local Windows server?

A

It will automatically stay bi-directionally synced with your files in Azure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does B2B collaboration support?

A

Entra ID and social identities

Example sentence: Enable external users to use their preferred identity to sign into your Microsoft or other enterprise applications (SaaS apps, custom-developed apps, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does B2B direct connect support?

A

Multiple two-way trusts

Example sentence: Establish a mutual, two-way trust with another Entra ID organization for seamless collaboration. Useful for heavy, daily collaboration with close business partners.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does Business-to-Consumer (B2C) support?

A

Entra & social identities

Example sentence: Publish modern SaaS apps or custom-developed apps to consumers and customers, while using Entra ID B2C for identity and access management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is an Entra ID multi-tenant organization?

A

Collaborate with multiple tenants in a single Entra ID organization via cross-tenant synchronization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does LL stand for in Entra ID?

A

LL stands for language options.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are some features within Entra ID?

A

Features within Entra ID include language options.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Conditional Access used for?

A

Used by Entra ID to bring signals together, to make decisions, and enforce organizational policies

Conditional Access is used by Entra ID for these purposes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What does Azure RBAC help you manage?

A

who has access to Azure resources,
what they can do with those resources,
which resources/areas they have access to

RBAC = Role Based Access Control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is Azure RBAC?

A

Built on Azure Resource Manager and provides fine-grained access management of Azure resources.

Azure RBAC is one element of implementing ‘least privilege’.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does Azure RBAC stand for?

A

Azure RBAC stands for Azure Role-Based Access Control.

Example sentence: Azure RBAC allows you to assign specific roles to users, granting them access only to the resources they need.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the three principles of Zero Trust?

A

Verify explicitly
Always authenticate and authorize based on all available data points.
Use least privilege access
Limit user access with Just-In-Time and Just-Enough-Access (JIT/JEA), risk-based adaptive policies, and data protection.
Assume breach
Segment access to minimize blast radius

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does ‘Verify explicitly’ mean in Zero Trust?

A

Always authenticate and authorize based on all available data points.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What does ‘Use least privilege access’ mean in Zero Trust?

A

Limit user access with Just-In-Time and Just-Enough-Access (JIT/JEA), risk-based adaptive policies, and data protection.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does ‘Assume breach’ mean in Zero Trust?

A

Segment access to minimize blast radius

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Traditional Architecture

A

Older model of network security

First footnote

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Zero Trust Architecture

A

Security model where nothing is trusted by default

Second footnote

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Trusted

A

Considered reliable or secure

Seventh footnote

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Trusted by default

A

Assumed to be secure without verification

Eighth footnote

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Trust but verify

A

Concept of trusting but confirming the trustworthiness

Tenth footnote

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Security based on identity, not on network perimeter

A

Approach to security that focuses on user identity

Eleventh footnote

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is Zero Trust Security?

A

Unlike the ‘trust but verify’ approach, in Zero Trust, no entity is trusted by default.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are the three principles of Zero Trust Security?

A

It is based on three principles: assume breach, verify explicitly, and least privilege access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What is defense in depth?

A

A layered (defense in depth) approach that does not rely on one method to completely protect your environment.

Example sentence: Implementing firewalls, intrusion detection systems, and encryption mechanisms are all part of a defense in depth strategy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is Defender for Cloud?

A

A unified infrastructure security management system that strengthens the security posture of your cloud and on-premises data centers. Provides security guidance for compute, data, network, storage, app, and other services. Includes support for both Azure and on-premises workloads, as well as other public clouds (AWS, GCP). Multi-cloud support.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What are factors that can affect Azure resource costs?

A

Resource types, services, locations, ingress and egress traffic

Example sentence: The cost of running a virtual machine in the West US region may differ from running the same virtual machine in the East US region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What are factors that can reduce costs?

A

reserved instances, reserved capacity, hybrid use benefit, spot pricing

Example sentence: Using reserved instances can help reduce overall cloud computing costs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What is Reserved?

A

Reserve virtual machines in advance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What is Reserved Instances?

A

Reserve virtual machines in advance and save up to 72 percent compared to PAYG pricing with 1-yr or 3-yr commitment

Example: By committing to a 3-year Reserved Instance, you can significantly reduce your cloud computing costs.

40
Q

Reserved

A

Capacity

Reserved capacity enables you to more easily manage costs across predictable and variable workloads and help optimize budgeting and forecasting.

41
Q

What is Azure Service?

A

Notifies you about Azure service incidents and planned maintenance so you can take action to mitigate downtime.

Example sentence: Azure Service Health sends alerts to notify users of any service incidents.

42
Q

What is Application Insights?

A

An extension of Azure Monitor and provides application performance monitoring (APM) features.

43
Q

What does Application Insights monitor?

A

Monitors the availability, performance, and usage of your web applications.

44
Q

What does Application Insights enable?

A

Enables proactive understanding of app performance and reactive review of app execution to determine root cause.

45
Q

What is Azure Monitor?

A

Alerts

Azure Monitor is a proactive way to detect and address issues before they become critical.

46
Q

What can you create alerts on in Azure Monitor?

A

You can create alerts on any metric or log data source in the Azure Monitor data platform.

Types include metric, log, activity, service health, resource health, smart detection, and Prometheus.

47
Q

What is Azure Monitor?

A

A service that collects monitoring telemetry from a variety of on-premises and Azure sources.

48
Q

What can Azure Monitor monitor?

A

Resources like app, VMs, guest OS, containers, DBs, security, and network events.

49
Q

Where does Azure Monitor store the telemetry it collects?

A

In an Azure Log Analytics instance backend data store

Azure Monitor aggregates and stores this telemetry in an Azure Log Analytics instance backend data store.

50
Q

What is Azure Advisor?

A

Scans your Azure configuration and recommends changes to optimize deployments, increase security, and save you money.

Analyzes the configuration of the resource deployed in the Azure subscriptions for high availability, security, performance, costs

51
Q

What does laC stand for?

A

Infrastructure as Code

laC is the management of infrastructure (networks, VMs, load balancers, and connection topology) described in code.

52
Q

What does code in the laC model result in?

A

The same environment every time it is applied.

Just as the same source code generates the same binary, code in the laC model results in the same environment every time it is applied.

53
Q

What is laC used in conjunction with?

A

Continuous integration and continuous delivery (CI/CD)

laC is a key DevOps practice and is used in conjunction with continuous integration and continuous delivery (CI/CD).

54
Q

What is Azure Arc?

A

A platform that extends Azure services to run applications across datacenters, edge, and multi-cloud environments.

Azure Arc provides a consistent development, operations, and security model to run applications on new and existing hardware.

55
Q

What does Azure Arc simplify?

A

Governance and management by delivering a consistent multi-cloud and on-premises management platform.

Azure Arc simplifies governance and management by delivering a consistent multi-cloud and on-premises management platform.

56
Q

What is the purpose of Azure Arc?

A

A platform that extends Azure services to run applications across datacenters, edge, and multi-cloud environments.

Example sentence: Azure Arc allows organizations to manage resources centrally across different environments.

57
Q

What is a ARM template?

A

A JavaScript Object Notation (JSON) file that defines the infrastructure and configuration for your project.

Templates use declarative syntax and are idempotent, which means you can deploy many times and get same resources and state.

58
Q

What is Azure Resource Manager?

A

Azure Resource Manager (ARM) is the deployment and management service for Azure.

59
Q

What does Azure Resource Manager provide?

A

It provides a management layer that enables you to create, update, and delete resources in your Azure account.

60
Q

What is Azure CLI?

A

The Azure command-line interface (Azure CLI) is a set of commands used to create and manage Azure resources.

61
Q

Where is Azure CLI available?

A

Available on Windows, macOS, and Linux, Docker, and Azure Cloud Shell.

62
Q

What is Azure Mobile?

A

App for iOS and Android that enables managing, tracking health and status, and troubleshooting your Azure resources

Example: Azure Mobile is a useful tool for monitoring the performance of your cloud services.

63
Q

What is a set of cdlets for managing Azure resources directly from the PowerShell command line?

A

Azure

A set of cdlets for managing Azure resources directly from the PowerShell command line.

64
Q

What technology allows for managing Azure resources directly from the PowerShell command line?

A

PowerShell

Technology that allows for managing Azure resources directly from the PowerShell command line.

65
Q

What does MSFT provide for managing Azure resources?

A

Azure-specific modules and cmalets

MSFT provides Azure-specific modules and cmalets

66
Q

What is Azure Cloud Shell?

A

An interactive, authenticated, browser-accessible shell for managing Azure resources.

It includes both Bash and PowerShell options

67
Q

What is Azure?

A

A web-based, unified console where you can manage your Azure subscription using a graphical user interface.

  • Example: I accessed Azure through the portal to deploy a new virtual machine.
68
Q

What do resource locks prevent?

A

Prevent other users in your organization from accidentally deleting or modifying critical resources.

The lock overrides any permissions the user might have.

69
Q

What is a Blueprint in Azure?

A

A container for composing sets of standards, patterns, and requirements for implementation of Azure cloud services, security, and design

70
Q

What does a Blueprint in Azure help with?

A

Composing sets of standards, patterns, and requirements for implementation of Azure cloud services, security, and design

71
Q

What is FUNDA in Azure?

A

A collection of Azure policy definitions that are grouped together towards a specific goal

For more exam prep and Azure tutorials, follow us on Youtube at https://bit.ly/azure

72
Q

What is Microsoft Purview?

A

A unified data governance service that helps organizations manage and govern their on-premises, multi-cloud, and SaaS data.

73
Q

What does Microsoft Purview automate?

A

Data discovery by providing data scanning and classification for assets across the organization’s data estate.

74
Q

What can tags be the basis for?

A

Applying business policies or tracking costs

Tags can be the basis for applying business policies or tracking costs

75
Q

How can you enforce tagging rules with Azure policies?

A

You can enforce tagging rules with Azure policies

You can also enforce tagging rules with Azure policies

76
Q

What are some examples of common tags?

A

Owner, cost center, app/service, and environment

Examples of common tags include owner, cost center, app/service, and environment

77
Q

What is Azure Cost Management?

A

A suite of tools provided by Microsoft that help you analyze, manage, and optimize costs of your workloads.

Example: Azure Cost Management helps businesses track their cloud spending and identify cost-saving opportunities.

78
Q

When should you use Azure Cost Management?

A

AFTER you deploy.

Utilizing Azure Cost Management after deployment allows you to monitor and adjust costs as needed.

79
Q

What is a TCO Calculator?

A

A tool that helps estimate cost savings you can achieve by migrating application workloads to Azure.

80
Q

What does a TCO Calculator allow you to do?

A

Allows you to compare the TCO of different Azure services and regions and provides a detailed breakdown of cost of components and potential savings.

81
Q

What is the purpose of the Pricing Calculator?

A

Interactive calculator that allows you to estimate the expected monthly Azure costs.

82
Q

What can you choose using the Pricing Calculator?

A

Regions, services, options, and SKUs.

83
Q

What type of Azure resources does Spot Pricing apply to?

A

Azure VMs only

applies to Azure VMs only!

84
Q

What is Spot Pricing?

A

Access unused Azure compute capacity at deep discounts—up to 90 percent compared to pay-as-you-go prices

Pricing

85
Q

When should Spot Pricing be used?

A

Use for workloads that can be interrupted without harm

Use for workloads that can be interrupted without harm

86
Q

What is Hybrid Use?

A

Hybrid Use lets you use your on-premises Software Assurance-enabled Windows Server and SQL Server licenses on Azure.

Example: You can run your existing Windows Server workloads in Azure with Hybrid Use benefit.

87
Q

Reserved

A

Capacity

Reserved capacity enables you to more easily manage costs across predictable and variable workloads and help optimize budgeting and forecasting.

88
Q

also includes

A

-year and 3-year options

This option includes -year and 3-year options.

89
Q

What does Azux Table Storage service store?

A

Service stores structured NoSQL data.

Example sentence: Azux Table Storage service stores customer information in a schemaless format.

90
Q

What type of attribute store does Azux Table Storage use?

A

Schemaless key attribute store.

Azux Table Storage does not require a predefined schema for storing data.

91
Q

What is the benefit of using Azux Table Storage for storing large numbers of messages?

A

Storing large numbers of messages.

Example sentence: Azux Table Storage is ideal for applications that need to store and retrieve a high volume of messages.

92
Q

How is Azux Table Storage accessible?

A

Accessible from anywhere via HTTP or HTTPS.

Developers can access Azux Table Storage from any location using standard HTTP or secure HTTPS protocols.

93
Q

Service endpoint

A

To provide a way to lock down access

All instances of paass service to use private endpoint for access from public internet.

94
Q

Private endpoint

A

Use for specific instance.

Enable access from on-premises without public endpoint.

95
Q

What is the hosted Kubernetes service provided by Azure?

A

Azure Kubernetes Service (AKS)

Azure handles critical tasks like health monitoring and maintenance for you!

96
Q

What do you pay for in Azure Kubernetes Service?

A

Agent Nodes within the cluster

Resource Red Por um

97
Q

What is a virtual desk in Azure networking?

A

UNet, virtual NIC

Network security group, or public IP