Azure Study Material Flashcards

1
Q

What does GZRS stand for?

A

GEO-ZONE REDUNDANT STORAGE

Copies your data synchronously three times within the primary region using ZRS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How does GZRS handle redundancy in the secondary region?

A

It copies the data asynchronously to a single physical location in the secondary region.

Recommended by MSFT for apps requiring high availability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the benefit of using GZRS along with GRS?

A

With GRS and GZRS, redundancy is extended to the secondary region!

Options within

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

LRS

A

Locally Redundant Storage

Copies your data synchronously three times within a single physical location in the primary region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

ZRS

A

Zone Redundant Storage

Copies your data synchronously across three Azure availability zones in the primary region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does GRS stand for?

A

Geo-Redundant Storage

Copies your data synchronously three times within a single physical location in the primary region using LRS. It then copies it asynchronously to a single physical location in the secondary region. 3 copies using LRS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How does GRS store data?

A

It copies your data synchronously three times within a single physical location in the primary region using LRS. It then copies it asynchronously to a single physical location in the secondary region. 3 copies using LRS

Copies your data synchronously three times within a single physical location in the primary region using LRS. It then copies it asynchronously to a single physical location in the secondary region. 3 copies using LRS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is AzCopy?

A

A command-line utility that you can use to copy blobs or files to or from your storage account.

1:33:10 / 2:30:51 • DOMAIN 2.3 Describe Azure Storage Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Azure Storage Explorer?

A

A standalone app that provides a graphical interface to manage files and blobs in your Azure Storage Account. Supports file and blob upload, download, or move between accounts.

1:33:10 / 2:30:51 • DOMAIN 2.3 Describe Azure Storage Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Azure File Sync?

A

A tool that lets you centralize your file shares in Azure Files and keep the flexibility, performance, and compatibility of a Windows file server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What happens once Azure File Sync is installed on a local Windows server?

A

It will automatically stay bi-directionally synced with your files in Azure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does B2B collaboration support?

A

Entra ID and social identities

Example sentence: Enable external users to use their preferred identity to sign into your Microsoft or other enterprise applications (SaaS apps, custom-developed apps, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does B2B direct connect support?

A

Multiple two-way trusts

Example sentence: Establish a mutual, two-way trust with another Entra ID organization for seamless collaboration. Useful for heavy, daily collaboration with close business partners.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does Business-to-Consumer (B2C) support?

A

Entra & social identities

Example sentence: Publish modern SaaS apps or custom-developed apps to consumers and customers, while using Entra ID B2C for identity and access management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is an Entra ID multi-tenant organization?

A

Collaborate with multiple tenants in a single Entra ID organization via cross-tenant synchronization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does LL stand for in Entra ID?

A

LL stands for language options.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are some features within Entra ID?

A

Features within Entra ID include language options.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Conditional Access used for?

A

Used by Entra ID to bring signals together, to make decisions, and enforce organizational policies

Conditional Access is used by Entra ID for these purposes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What does Azure RBAC help you manage?

A

who has access to Azure resources,
what they can do with those resources,
which resources/areas they have access to

RBAC = Role Based Access Control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is Azure RBAC?

A

Built on Azure Resource Manager and provides fine-grained access management of Azure resources.

Azure RBAC is one element of implementing ‘least privilege’.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does Azure RBAC stand for?

A

Azure RBAC stands for Azure Role-Based Access Control.

Example sentence: Azure RBAC allows you to assign specific roles to users, granting them access only to the resources they need.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the three principles of Zero Trust?

A

Verify explicitly
Always authenticate and authorize based on all available data points.
Use least privilege access
Limit user access with Just-In-Time and Just-Enough-Access (JIT/JEA), risk-based adaptive policies, and data protection.
Assume breach
Segment access to minimize blast radius

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does ‘Verify explicitly’ mean in Zero Trust?

A

Always authenticate and authorize based on all available data points.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What does ‘Use least privilege access’ mean in Zero Trust?

A

Limit user access with Just-In-Time and Just-Enough-Access (JIT/JEA), risk-based adaptive policies, and data protection.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What does 'Assume breach' mean in Zero Trust?
Segment access to minimize blast radius
26
Traditional Architecture
Older model of network security ## Footnote First footnote
27
Zero Trust Architecture
Security model where nothing is trusted by default ## Footnote Second footnote
28
Trusted
Considered reliable or secure ## Footnote Seventh footnote
29
Trusted by default
Assumed to be secure without verification ## Footnote Eighth footnote
30
Trust but verify
Concept of trusting but confirming the trustworthiness ## Footnote Tenth footnote
31
Security based on identity, not on network perimeter
Approach to security that focuses on user identity ## Footnote Eleventh footnote
32
What is Zero Trust Security?
Unlike the 'trust but verify' approach, in Zero Trust, no entity is trusted by default.
33
What are the three principles of Zero Trust Security?
It is based on three principles: assume breach, verify explicitly, and least privilege access.
34
What is defense in depth?
A layered (defense in depth) approach that does not rely on one method to completely protect your environment. ## Footnote Example sentence: Implementing firewalls, intrusion detection systems, and encryption mechanisms are all part of a defense in depth strategy.
35
What is Defender for Cloud?
A unified infrastructure security management system that strengthens the security posture of your cloud and on-premises data centers. Provides security guidance for compute, data, network, storage, app, and other services. Includes support for both Azure and on-premises workloads, as well as other public clouds (AWS, GCP). Multi-cloud support.
36
What are factors that can affect Azure resource costs?
Resource types, services, locations, ingress and egress traffic ## Footnote Example sentence: The cost of running a virtual machine in the West US region may differ from running the same virtual machine in the East US region.
37
What are factors that can reduce costs?
reserved instances, reserved capacity, hybrid use benefit, spot pricing ## Footnote Example sentence: Using reserved instances can help reduce overall cloud computing costs.
38
What is Reserved?
Reserve virtual machines in advance
39
What is Reserved Instances?
Reserve virtual machines in advance and save up to 72 percent compared to PAYG pricing with 1-yr or 3-yr commitment ## Footnote Example: By committing to a 3-year Reserved Instance, you can significantly reduce your cloud computing costs.
40
Reserved
Capacity ## Footnote Reserved capacity enables you to more easily manage costs across predictable and variable workloads and help optimize budgeting and forecasting.
41
What is Azure Service?
Notifies you about Azure service incidents and planned maintenance so you can take action to mitigate downtime. ## Footnote Example sentence: Azure Service Health sends alerts to notify users of any service incidents.
42
What is Application Insights?
An extension of Azure Monitor and provides application performance monitoring (APM) features.
43
What does Application Insights monitor?
Monitors the availability, performance, and usage of your web applications.
44
What does Application Insights enable?
Enables proactive understanding of app performance and reactive review of app execution to determine root cause.
45
What is Azure Monitor?
Alerts ## Footnote Azure Monitor is a proactive way to detect and address issues before they become critical.
46
What can you create alerts on in Azure Monitor?
You can create alerts on any metric or log data source in the Azure Monitor data platform. ## Footnote Types include metric, log, activity, service health, resource health, smart detection, and Prometheus.
47
What is Azure Monitor?
A service that collects monitoring telemetry from a variety of on-premises and Azure sources.
48
What can Azure Monitor monitor?
Resources like app, VMs, guest OS, containers, DBs, security, and network events.
49
Where does Azure Monitor store the telemetry it collects?
In an Azure Log Analytics instance backend data store ## Footnote Azure Monitor aggregates and stores this telemetry in an Azure Log Analytics instance backend data store.
50
What is Azure Advisor?
Scans your Azure configuration and recommends changes to optimize deployments, increase security, and save you money. ## Footnote Analyzes the configuration of the resource deployed in the Azure subscriptions for high availability, security, performance, costs
51
What does laC stand for?
Infrastructure as Code ## Footnote laC is the management of infrastructure (networks, VMs, load balancers, and connection topology) described in code.
52
What does code in the laC model result in?
The same environment every time it is applied. ## Footnote Just as the same source code generates the same binary, code in the laC model results in the same environment every time it is applied.
53
What is laC used in conjunction with?
Continuous integration and continuous delivery (CI/CD) ## Footnote laC is a key DevOps practice and is used in conjunction with continuous integration and continuous delivery (CI/CD).
54
What is Azure Arc?
A platform that extends Azure services to run applications across datacenters, edge, and multi-cloud environments. ## Footnote Azure Arc provides a consistent development, operations, and security model to run applications on new and existing hardware.
55
What does Azure Arc simplify?
Governance and management by delivering a consistent multi-cloud and on-premises management platform. ## Footnote Azure Arc simplifies governance and management by delivering a consistent multi-cloud and on-premises management platform.
56
What is the purpose of Azure Arc?
A platform that extends Azure services to run applications across datacenters, edge, and multi-cloud environments. ## Footnote Example sentence: Azure Arc allows organizations to manage resources centrally across different environments.
57
What is a ARM template?
A JavaScript Object Notation (JSON) file that defines the infrastructure and configuration for your project. ## Footnote Templates use declarative syntax and are idempotent, which means you can deploy many times and get same resources and state.
58
What is Azure Resource Manager?
Azure Resource Manager (ARM) is the deployment and management service for Azure.
59
What does Azure Resource Manager provide?
It provides a management layer that enables you to create, update, and delete resources in your Azure account.
60
What is Azure CLI?
The Azure command-line interface (Azure CLI) is a set of commands used to create and manage Azure resources.
61
Where is Azure CLI available?
Available on Windows, macOS, and Linux, Docker, and Azure Cloud Shell.
62
What is Azure Mobile?
App for iOS and Android that enables managing, tracking health and status, and troubleshooting your Azure resources ## Footnote Example: Azure Mobile is a useful tool for monitoring the performance of your cloud services.
63
What is a set of cdlets for managing Azure resources directly from the PowerShell command line?
Azure ## Footnote A set of cdlets for managing Azure resources directly from the PowerShell command line.
64
What technology allows for managing Azure resources directly from the PowerShell command line?
PowerShell ## Footnote Technology that allows for managing Azure resources directly from the PowerShell command line.
65
What does MSFT provide for managing Azure resources?
Azure-specific modules and cmalets ## Footnote MSFT provides Azure-specific modules and cmalets
66
What is Azure Cloud Shell?
An interactive, authenticated, browser-accessible shell for managing Azure resources. ## Footnote It includes both Bash and PowerShell options
67
What is Azure?
A web-based, unified console where you can manage your Azure subscription using a graphical user interface. ## Footnote - Example: I accessed Azure through the portal to deploy a new virtual machine.
68
What do resource locks prevent?
Prevent other users in your organization from accidentally deleting or modifying critical resources. ## Footnote The lock overrides any permissions the user might have.
69
What is a Blueprint in Azure?
A container for composing sets of standards, patterns, and requirements for implementation of Azure cloud services, security, and design
70
What does a Blueprint in Azure help with?
Composing sets of standards, patterns, and requirements for implementation of Azure cloud services, security, and design
71
What is FUNDA in Azure?
A collection of Azure policy definitions that are grouped together towards a specific goal ## Footnote For more exam prep and Azure tutorials, follow us on Youtube at https://bit.ly/azure
72
What is Microsoft Purview?
A unified data governance service that helps organizations manage and govern their on-premises, multi-cloud, and SaaS data.
73
What does Microsoft Purview automate?
Data discovery by providing data scanning and classification for assets across the organization's data estate.
74
What can tags be the basis for?
Applying business policies or tracking costs ## Footnote Tags can be the basis for applying business policies or tracking costs
75
How can you enforce tagging rules with Azure policies?
You can enforce tagging rules with Azure policies ## Footnote You can also enforce tagging rules with Azure policies
76
What are some examples of common tags?
Owner, cost center, app/service, and environment ## Footnote Examples of common tags include owner, cost center, app/service, and environment
77
What is Azure Cost Management?
A suite of tools provided by Microsoft that help you analyze, manage, and optimize costs of your workloads. ## Footnote Example: Azure Cost Management helps businesses track their cloud spending and identify cost-saving opportunities.
78
When should you use Azure Cost Management?
AFTER you deploy. ## Footnote Utilizing Azure Cost Management after deployment allows you to monitor and adjust costs as needed.
79
What is a TCO Calculator?
A tool that helps estimate cost savings you can achieve by migrating application workloads to Azure.
80
What does a TCO Calculator allow you to do?
Allows you to compare the TCO of different Azure services and regions and provides a detailed breakdown of cost of components and potential savings.
81
What is the purpose of the Pricing Calculator?
Interactive calculator that allows you to estimate the expected monthly Azure costs.
82
What can you choose using the Pricing Calculator?
Regions, services, options, and SKUs.
83
What type of Azure resources does Spot Pricing apply to?
Azure VMs only ## Footnote applies to Azure VMs only!
84
What is Spot Pricing?
Access unused Azure compute capacity at deep discounts—up to 90 percent compared to pay-as-you-go prices ## Footnote Pricing
85
When should Spot Pricing be used?
Use for workloads that can be interrupted without harm ## Footnote Use for workloads that can be interrupted without harm
86
What is Hybrid Use?
Hybrid Use lets you use your on-premises Software Assurance-enabled Windows Server and SQL Server licenses on Azure. ## Footnote Example: You can run your existing Windows Server workloads in Azure with Hybrid Use benefit.
87
Reserved
Capacity ## Footnote Reserved capacity enables you to more easily manage costs across predictable and variable workloads and help optimize budgeting and forecasting.
88
also includes
-year and 3-year options ## Footnote This option includes -year and 3-year options.
89
What does Azux Table Storage service store?
Service stores structured NoSQL data. ## Footnote Example sentence: Azux Table Storage service stores customer information in a schemaless format.
90
What type of attribute store does Azux Table Storage use?
Schemaless key attribute store. ## Footnote Azux Table Storage does not require a predefined schema for storing data.
91
What is the benefit of using Azux Table Storage for storing large numbers of messages?
Storing large numbers of messages. ## Footnote Example sentence: Azux Table Storage is ideal for applications that need to store and retrieve a high volume of messages.
92
How is Azux Table Storage accessible?
Accessible from anywhere via HTTP or HTTPS. ## Footnote Developers can access Azux Table Storage from any location using standard HTTP or secure HTTPS protocols.
93
Service endpoint
To provide a way to lock down access ## Footnote All instances of paass service to use private endpoint for access from public internet.
94
Private endpoint
Use for specific instance. ## Footnote Enable access from on-premises without public endpoint.
95
What is the hosted Kubernetes service provided by Azure?
Azure Kubernetes Service (AKS) ## Footnote Azure handles critical tasks like health monitoring and maintenance for you!
96
What do you pay for in Azure Kubernetes Service?
Agent Nodes within the cluster ## Footnote Resource Red Por um
97
What is a virtual desk in Azure networking?
UNet, virtual NIC ## Footnote Network security group, or public IP