Compute Flashcards

1
Q

What is Azure Key Vault?

A

A service that safeguards encryption keys and secrets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does an access policy in an Azure Key Vault define?

A

What operations can be done on the secrets and who can perform these operations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is best practice for storing passwords in ARM templates?

A

Using Azure Key Vault with an access policy, so it is not stored in plaintext

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does a custom script extension do?

A
  • Downloads and executes scripts on Azure VMs
  • Useful for configuration/management tasks like software installation
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How would you apply a custom script extension in an ARM template?

A

Modify the extension Profile portion of the template

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the steps involved in setting up Azure Automation State Configuration to manage VM configs?

A

Step 1: Create and upload a configuration to Azure Automation
Step 2: Compile a configuration into a node configuration
Step 3: Register a VM to be managed by State Configuration
Step 4: Specify configuration mode settings
Step 5: Assign a node configuration to a managed node
Step 6: Check the compliance status of a managed node

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Why and when would you use a spot VM instance?

A

Ideal for workloads that can be interrupted, providing scalability while reducing costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is SKU?

A
  • Stock Keeping Unit
  • A specific version or offering of a resource that is available in Azure
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the Compute Gallery used for?

A

Enabled versioning and replication of images and apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What’s the difference between uniform and flexible VMSS?

A
  • In uniform and flexible VMSS, you define a template and capacity
  • Flexible VMSS additionally supports auto-scale, adding other VMs, and full control over VMs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a benefit of using a container over a VM?

A

Less resources consumed
Smaller size
Faster startup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In Azure CLI, what command would you use to apply your YAML manifests in an AKS cluster?

A

kubectl apply -f <filename>.yaml</filename>

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

In Azure CLI, what command is used for AKS cluster configuration?

A

az aks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How would you move a VM to another network?

A
  • Delete VM
  • Recreate VM and add network interface
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What OS can ASP.NET apps run on?

A

Windows only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What OS can ASP.NET Core apps run on?

A

Windows and Linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

To run an App, what must be true about the associated App Service plan?

A

Must be in same region the app is running in
Must have a compatible OS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Why might you be unable to create a staging slot?

A
  • Your app may be running in too low a tier
  • Scale up to Standard, Premium, or Isolated to enable multiple deployment slots
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

During Azure planned maintenance, what is the maximum percentage of machines in a VMSS that will upgrade at any time?

A

20%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What could you do if you wanted to move your VM so it wouldn’t be affected by a planned maintenance?

A

Redeploy the VM so it moves to a new node

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How many OS can you have per app service plan?

A

1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How would you add a custom domain name to a web app?

A

Create a DNS record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Can you change the VNet of a VM after creation?

A

No, you can only change the subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is required in order to access applications on Kubernetes?

A

An application Load Balancer created by Azure with a public IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is the best way to deploy 10 Azure web apps?
App Service plan (Standard supports 10 web apps)
26
What changes to a VM would cause downtime?
Resizing
27
What steps are needed to deploy a web app update after testing?
* Deploy the update to the staging deployment slot * Test * Swap to the production deployment slot
28
What is a quicker way to deploy multiple VMs
Use ARM template VMSS
29
What are the prerequisites for creating a recovery services vault to protect virtual machines?
The vault must be in the same region as the VM
30
What is the difference between a container and a VM?
* VMs virtualize an entire machine (hardware) * Containers only virtualize software layers above the OS level (software)
31
How would you configure cluster autoscaler for AKS nodes?
az aks Scale the nodes in the Azure portal
32
How would you configure Horizontal pod autoscaling?
kubectl
33
What are Azure proximity placement groups?
* A logical grouping capability for Azure VMs * VMs assigned to a proximity placement group are placed in the same data center, so the VMSS should share the same region
34
What port does DNS use?
53
35
What port does HTTP/web server use?
80
36
What is the difference between an availability set and an availability zone?
Set - Within data center - Configure update and fault domains Zone - Within region - Protect from data center failures
37
What must you specify when deploying a VM from a template?
Resource group Password
38
What VM property can you modify via scheduled runbook?
Size
39
What extensions can you use to ensure a particular service offering is available on all deployed VMs?
* Custom script extension * DSC extension
40
Where do containers live?
Inside pods
41
What does the service CIDR assign IP addresses for?
Internal services in the AKS cluster
42
For Windows Server, what is the temporary disk?
D:\
43
What type of disk does Azure support for migration from on-premises to Azure?
VHD file format with a fixed size disk
44
What is the advantage of using deployment slots?
You can validate app changes in a staging deployment slot before swapping to production
45
What are your options for restoring a VM?
Create new Replace existing
46
What is a requirement for Azure Backup to work correctly?
The latest version of the Azure VM Agent
47
What is the maximum number of update domains you can have?
20
48
What is the maximum number of fault domains you can have?
3 for most regions
49
How many app service plans can you have per region?
10 free, 100 premium
50
What command allows you to use a custom ARM template file to deploy resources to a RG?
New-AzResourceGroupDeployment
51
What does Microsoft Azure Recovery Services Agent (MARS) do?
Restore data for entire volume or just individual folders and files
52
Why would you add a copy loop to the resource section of your template?
* So you can dynamically set the number of items for a property during deployment * Copy - copyindex
53
What do you need to connect a VM to different subnets?
* Multiple NICS * Each NIC attached to a VM must exist in the same location and subscription as the VM
54
What's the difference between New-AzResource and New-AzResourceGroupDeployment?
* New-AzResource creates an Azure resource in a RG * New-AzResourceGroupDeployment adds a deployment to an existing RG
55
What do you backup an app service to?
An Azure storage account
56
What can you backup with a Recovery service vault?
VMs File Shares
57
What types of storage can you backup in a Backup vault?
Azure disks Azure blobs
58
When backing up an app service, how do you exclude folders/files from being stored in future backups?
Create a *_backup.filter* file
59
What "type": command is needed to install an extension on a VM when deploying an ARM template?
Microsoft.Compute/virtualMachines/extensions
60
What is required to run an AKS cluster that supports node pools for Windows Server containers?
A network policy that uses Azure CNI (advanced) network plugin
61
What must be enabled if you want to integrate an AKS cluster with an Azure container registry?
AKS-managed Azure Active Directory setting
62
When configuring AKS clusters, when would you use the "max surge" command?
Extra nodes used to speed up upgrade
63
What deployment modes are available when using ARM templates?
Complete Incremental
64
What does deploying an ARM template in complete mode do?
Resource Manager deletes resources that exist in the RG but are not specified in the template
65
What does deploying an ARM template in incremental mode do?
Resource Manager leaves unchanged resources that exist in the resource group but are not specified in the template
66
What does the Cooldown parameter define when configuring autoscaling?
How much time has to pass before the next autoscale operation triggers
67
What OS supports multi-container groups?
Linux only
68
What IP address does Azure Firewall support?
Standard SKU public IPv4 addresses
69
What does ImageReference specify in an ARM template?
Which image to use, whether it be a platform, marketplace, or VM image
70
What kind of record does Azure use to verify a custom domain?
CNAME or TXT
71
For Azure App Services, why might you need to use a Standard plan over a Basic plan?
* If you need 4-10 instances * Standard supports up to 10, basic supports up to 3
72
For web apps, what runtime stacks are ONLY supported by Windows?
ASP.NET
73
For web apps, what runtime stacks are ONLY supported by Linux?
Python
74
What OS does Azure Container Apps support?
Linux only
75
At what level would you deploy a template that creates a RG?
Subscription
76
What does virtual network integration do for your app?
* Gives your app access to resources in your VNet * Used only to make outbound calls from your app into your VNet
77
How would you sign in as an admin user into a container registry?
Username: Name of container registry Password: Admin user access key
78
What is required to ensure a VM can be created in an Availability Zone?
* VM should use **managed disks** if you want to move them to an Availability Zone using Site Recovery * You should select a zone in the **High Availability** section during VM creation
79
Does the location of a RG influence the choice of the location of a VM?
No
80
Can you restore a test slot from a production slot backup?
No