Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ-104 > Chapter 3: Governance and Compliance > Flashcards

Chapter 3: Governance and Compliance Flashcards

1
Q

What is a Subscription?

A

Billing unit that aggregates all costs of underlying resources
Helps segment billing units into logical ownership
Ex. Marketing vs. Engineering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does a subscription contain?

A

Contain resource groups and associated resources
Each resource group must be part of one single subscription
Subscription is a scoping level for deploying ARM templates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are some types of subscriptions?

A

Pay as you Go
Free Trial
Enterprise Agreement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are 3 major types of subscription naming conventions?

A

Environment - Prod, Dev, Staging
Department/Teams
Region - geographical region of the business

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a Management Group?

A

Container to manage subscriptions in a parent/child relationship

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the Root Management Group?

A

Top level management group - cannot put another manage group above

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How many levels of management groups can you have?

A

6 levels

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can you deploy an Azure Policy at the Management Group level?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can you deploy RBAC at the Management Group level?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Why is it important to understand where you set scope for RBAC and Policies?

A

The level of scope will allow those settings to flow down from there - cascade downward

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Are users given access to a root management group by default?

A

No, this would allow users highest scope control
Only the global admin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Can Root Management Groups be moved or deleted?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What can the global admin do in the event of getting locked out?

A

Global Administrators can elevate themselves to User Access Admin of root group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is an Azure Policy?

A

Enforce compliance and enable auditing
You determine what is “compliant”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are some use cases for policies?

A

Prohibiting services and/or resources to control costs
Enforce allowed locations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the components of an Azure policy?

A

Definition
Assignment
Initiative Definition

17
Q

What is a policy definition?

A

Defines the policy - the evaluation criteria for compliance and defines the actions that take place
Audit or deny something outside of compliance
Example: Deny the creation of a resource without a specific tag

18
Q

What is a policy assignment?

A

The scope at which we assign our policy. The WHO

19
Q

What policy scopes are possible?

A

Management Group
Subscription
Resource Group
Resource

20
Q

What is a policy initiative definition?

A

Collection of policies that are tailored to achieving a singular high-level goal together

21
Q

What are Tags?

A

Name / Value pairs
Ex. Dept:Marketing, Env:Prod

22
Q

How many characters can names be? Values? Storage Accounts?

A

Names = 512
Value = 256
Storage = 128

23
Q

Are tags inherited down the hierarchy?

A

No tags stay at the set scope and are not inherited beneath.

24
Q

What is a resource lock?

A

Allows you to override permissions to resources
You can lock subscriptions, resource groups, or resources.

25
Q

What are the types of resource locks?

A

Read Only
Delete

26
Q

What is a Read Only Lock?

A

Allows users to only read a resource

27
Q

What is a CanNotDelete lock?

A

Allows you to read, modify, but not delete

28
Q

When can you not move a resource?

A

When you have a Read Only lock
You can still move with a Delete lock

29
Q

What impacts the cost of a resource?

A

Subscription type (Free, Pay as you go, enterprise agreement, Cloud Solution Provider)
Resource Type (ex. Blob vs. Table storage)
Usage Meters (CPU time, network traffic, disk size, etc.)
Resource Usage (Costs of actually using a resource)
Location (Services available in various geographical locations)

30
Q

What are some cost best practices?

A

Select appropriate resource for the use case
Plan costs ahead prior to purchase
Deallocate resources when no longer needed
Understand resource needs

31
Q

What are the main cost tools in Azure?

A

Pricing Calculator
Total Cost of Ownership Calculator
Microsoft cost management Tool

32
Q

What is the Pricing Calculator?

A

Create quotes of workloads prior to provisioning a resource

33
Q

What is the TCO calculator?

A

Scenario planning calculator to calculate how much you could save if you transitioned from on prem to the cloud.

34
Q

What is Microsoft Cost Management?

A

Helps analyze cost and set budgets

35
Q

What are the four major steps of planning a cloud strategy?

A

Define
Define governance needs of the organization
Plan
Plan which tools will be used to implement governance
Ready
Understand how those tools will be used to implement governance
Adopt
Implement governance for the organization using a cloud strategy

36
Q

What are the four major services for enforcing governance?

A

Management Groups
Subscriptions
RBAC
Policies
Tagging
Locks

AZ-104 (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions