CV Set One Flashcards
Deploy Web App as a container instance
You are a cloud architect for the Nutex Corporation, which uses azure for all of it’s resources. You need to implement restrictions to enforce their standards for allowed resource types.
What do you need to implement to make sure that your infrastucture stays compliant with corporate standards?
RBAC?
A Policy
PIM
CAP
What are the minimum requirements for deploying a VM from P$?
You administer Azure for the Verigon corporation. you want to prepare Azure Backup so that you can schedule regular backups from your on-premises file server to azure.
What are the necessary steps?
What are some key differences between Azure Table Storage and Cosmos Table API?
Choose those that apply:
a. query results are not sorted in partition key/row key order
b. Table names in ACDB API are not case sensitive
c. Empty tables with out any requests cost money
d. Row keys can be up to 255 bytes
e. Atom format is supported
f. CORS is supported
You are doing a comparison between thhe requirements for configureing a neworks ACL’s for an enpoint versus a NSG.
Which of the following statements are true regarding endpoint ACL’s and NSG’s ?
a. Traffice to an endpoint can be filtered by both an ACL and an NSG.
b. VIRTUAL_NETWORK is a default NSG tag.
c. NSG’s can be applied to resources in any region.
d. NSG’s can be applied to traffice to a specific endpoint.
e. ACL’s have blocked lists and safe lists.
f. NSG’’s can be applied to a subnet within a virtual network.
g. Traffice to a vm instance can be filtered by multiple NSG’s
You have create your website and deployed it to Azure. You are concerned about high traffic and memory consumption over the upcoming weekend.
What should you do to monitor the performance?
a Enable always on?
b Monitor the event log /logfiles/eventlog.xml and usae attach a task to this log to be emailed with specific event ids occur?
c Set up endpoint monitoring
d create an alert rule
You are the administrator of the Nutex Corporation. You want to prevent the accidental deletion of a storage account using an arm template.
Which built in RBAC role should you choose. (All that apply).
owner
Storage Account Contributor
User Access Administrator
Security Manager
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions-list
List a role definition in JSON format:
Get-AzRoleDefinition | ConvertTo-Json
PS C:\Users\pedro> Get-AzRoleDefinition ‘user access administrator’ | ConvertTo-Json
{
“Name”: “User Access Administrator”,
“Id”: “18d7d88d-d35e-4fb5-a5c3-7773c20a72d9”,
“IsCustom”: false,
“Description”: “Lets you manage user access to Azure resources.”,
“Actions”: [
“*/read”,
“Microsoft.Authorization/*”,
“Microsoft.Support/*”
],
“NotActions”: [],
“DataActions”: [],
“NotDataActions”: [],
“AssignableScopes”: [
“/”
]
}
Azure Administrators have been asked to add a member to the azure backup service who could create a backup vasult but would not be able to manage backup policies.
Which Azure RBAC role should be chosen?
a backup reader
b custom role
c backup contrib
d backup operator
Backup operator.
It has all the roles of the contributor with being able to removing backups and managing policy.
PS C:\Users\pedro> Get-AzRoleDefinition ‘backup operator’ | ConvertTo-Json
{
“Name”: “Backup Operator”,
“Id”: “00c29273-979b-4161-815c-10b084fb9324”,
“IsCustom”: false,
“Description”: “Lets you manage backup services, except removal of backup, vault creation and giving access to others”,
“Actions”: [
“Microsoft.Authorization/*/read”,
“Microsoft.Network/virtualNetworks/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/operationResults/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/operationResults/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/backup/action”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationResults/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/operationsStatus/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/provisionInstantItemRecovery/action”,
“Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/accessToken/action”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/restore/action”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/recoveryPoints/revokeInstantItemRecovery/action”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/protectedItems/write”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/refreshContainers/action”,
“Microsoft.RecoveryServices/Vaults/backupJobs/*”,
“Microsoft.RecoveryServices/Vaults/backupJobsExport/action”,
“Microsoft.RecoveryServices/Vaults/backupOperationResults/*”,
“Microsoft.RecoveryServices/Vaults/backupPolicies/operationResults/read”,
“Microsoft.RecoveryServices/Vaults/backupPolicies/read”,
“Microsoft.RecoveryServices/Vaults/backupProtectableItems/*”,
“Microsoft.RecoveryServices/Vaults/backupProtectedItems/read”,
“Microsoft.RecoveryServices/Vaults/backupProtectionContainers/read”,
“Microsoft.RecoveryServices/Vaults/backupUsageSummaries/read”,
“Microsoft.RecoveryServices/Vaults/certificates/write”,
“Microsoft.RecoveryServices/Vaults/extendedInformation/read”,
“Microsoft.RecoveryServices/Vaults/extendedInformation/write”,
“Microsoft.RecoveryServices/Vaults/monitoringAlerts/read”,
“Microsoft.RecoveryServices/Vaults/monitoringConfigurations/*”,
“Microsoft.RecoveryServices/Vaults/read”,
“Microsoft.RecoveryServices/Vaults/registeredIdentities/operationResults/read”,
“Microsoft.RecoveryServices/Vaults/registeredIdentities/read”,
“Microsoft.RecoveryServices/Vaults/registeredIdentities/write”,
“Microsoft.RecoveryServices/Vaults/usages/read”,
“Microsoft.Resources/deployments/*”,
“Microsoft.Resources/subscriptions/resourceGroups/read”,
“Microsoft.Storage/storageAccounts/read”,
“Microsoft.RecoveryServices/Vaults/backupstorageconfig/*”,
“Microsoft.RecoveryServices/Vaults/backupValidateOperation/action”,
“Microsoft.RecoveryServices/Vaults/backupOperations/read”,
“Microsoft.RecoveryServices/Vaults/backupPolicies/operations/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/write”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/inquire/action”,
“Microsoft.RecoveryServices/Vaults/backupEngines/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/write”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/backupProtectionIntent/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectableContainers/read”,
“Microsoft.RecoveryServices/Vaults/backupFabrics/protectionContainers/items/read”,
“Microsoft.RecoveryServices/locations/backupStatus/action”,
“Microsoft.RecoveryServices/locations/backupPreValidateProtection/action”,
“Microsoft.RecoveryServices/locations/backupValidateFeatures/action”,
“Microsoft.RecoveryServices/locations/backupAadProperties/read”,
“Microsoft.RecoveryServices/locations/backupCrrJobs/action”,
“Microsoft.RecoveryServices/locations/backupCrrJob/action”,
“Microsoft.RecoveryServices/locations/backupCrossRegionRestore/action”,
“Microsoft.RecoveryServices/locations/backupCrrOperationResults/read”,
“Microsoft.RecoveryServices/locations/backupCrrOperationsStatus/read”,
“Microsoft.RecoveryServices/Vaults/monitoringAlerts/write”,
“Microsoft.RecoveryServices/operations/read”,
“Microsoft.RecoveryServices/locations/operationStatus/read”,
“Microsoft.RecoveryServices/Vaults/backupProtectionIntents/read”,
“Microsoft.Support/*”,
“Microsoft.DataProtection/backupVaults/backupInstances/read”,
“Microsoft.DataProtection/backupVaults/backupInstances/read”,
“Microsoft.DataProtection/backupVaults/backupPolicies/read”,
“Microsoft.DataProtection/backupVaults/backupPolicies/read”,
“Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read”,
“Microsoft.DataProtection/backupVaults/backupInstances/recoveryPoints/read”,
“Microsoft.DataProtection/backupVaults/backupInstances/findRestorableTimeRanges/action”,
“Microsoft.DataProtection/backupVaults/read”,
“Microsoft.DataProtection/backupVaults/operationResults/read”,
“Microsoft.DataProtection/backupVaults/read”,
“Microsoft.DataProtection/backupVaults/read”,
“Microsoft.DataProtection/locations/operationStatus/read”,
“Microsoft.DataProtection/locations/operationResults/read”,
“Microsoft.DataProtection/providers/operations/read”
],
“NotActions”: [],
“DataActions”: [],
“NotDataActions”: [],
“AssignableScopes”: [
“/”
]
}
