deck 1 Flashcards

1
Q

Pay-As-You-Go - don’t want to forget about resources and it to keep billing you

A

In Cost Management and Billing create a budget and expiration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What happens when reach budget

A

Doesn’t stop resource, instead can add an action e.g. send email

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

virtual machine

A
windows or linux
use RDP or SSH to remotely control
Looks like a real server but isn't
Can be placed on a virtual network, arranged in availability sets, placed behind load balancers
Install whatever software
Server can be created in a few mins
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

VM Abstractions

A

Azure Batch
Virtual Machine Scale Sets
Azure Kubernetes Service
Service Fabric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

App services (web app) PAAS

A

Windows/Linux OS (but don’t control OS)
Fully managed servers - can’t remote control
.NET, .NET Core, Java, Ruby, Node.js, PHP and Python
Benefits in scaling, CI, deployment slots, integrates with VS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Azure Storage

A

Create storage accounts up to 5PB each: blob, queues, tables, files
Various level of replication included from local (11 9s durability) -> global (16 9s durability)
Storage tiers - hot, cool , archive
Keeps 3 copies of files
Managed (for VMs) or unmanaged

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Networking

A

Connectivity
Security
Delivery
Monitoring

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Connectivity

A

VNet - database entry
Virtual WAN - allows offices to connect to each other with Azure as middleman
ExpressRoute - allows Azure to office to connect - fast + encrypted (can use traditional VPN instead, runs over internet)
VPN Gateway
Azure DNS - having public/private domain names managed by Azure
Peering - connecting multiple VNets together so can have services in one region.
Bastion - Allows remote desktop into server without running rdp port or rdp software

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Security

A

Network Security Groups (NSG) - access control list
Azure Private Link - take what used to be public and turns them into private endpoints
DDoS protection - free level and can pay for more with SLAs
Azure Firewall
Web App firewall (WAF) - built into app gateway product. recognises top 10/20 attacks
VN endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Delivery

A

CDN -
Azure Front door - global load balancer
Traffic Manager
Application Gateway - app level (level 7) load balancer
Load balancer - network level (level 4) load balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Monitoring

A

Network watcher
ExpressRoute Monitor
Azure Monitor
VNet Terminal Access Point (TAP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

List create delete Azure CLI

A

az vm list
az keyvault create
az network vnet delete (vnet is a sub component of network)
az network vnet subnet list

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Powershell list create delete

A

Get-AzVM
New-AzKeyVault
Remove-AzVirtualNetwork
Get-AzVirtualNetworkSubnetConfig

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Powershell 7

A

Available for Windows, OSX and linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Bash CLI

A

For linux systems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Azure CLI

A

for Windows, OSX and Linux

17
Q

Azure Cloud Shell

A

In browser - CLI commands work too

18
Q

Install-Module -Name Az -AllowClobber -Force

A
  • AllowClobber allows overwriting existing files.

- Force (force to allow have 2 versions)

19
Q

AAD

A

Free - 500,000 users/groups, SSO, no company branding or self-service password reset, SLA, dynamic groups, group naming policies, conditional access,
Premium P1 - no AI risky account detection, risk based conditional access policies, identity governance e.g. PIM, access reviews, entitlement management
Premium P2
https://docs.microsoft.com/en-gb/azure/active-directory/authentication/concept-mfa-licensing#available-versions-of-azure-ad-multi-factor-authentication

20
Q

Account/User

A

Person or program with username, password MFA OR for app/managed identity - represents a program or service
Basis for authentication

21
Q

Tenant

A

Organisaton represented by public domain name i.e. example.com (unique for you)
Will be assigned a domain if not specified
A dedicated instance of AAD
Azure account always part of at least one tenant
Not every tenant needs to have subscription/can have more than one
More than one account can be owner

22
Q

Subscription

A

Agreement with microsoft to use azure services + how paying.

Gets billed to payment method of subscription - free PAYG, enterprise agreements

23
Q

Azure AD Join. Cloud first/cloud-only AD

A

Can use Azure AD to sign in on windows 10 devices
When you don’t have an on-prem AD or for remote branch of office with limited onprem infrastructure +not worth installing a local AD or maybe you don’t want to pollute on prem AD with temp employees

24
Q

Administrative Units

A

Taking a large organisation + dividing them into manageable segments e.g. canadian group + can specify which users can be admins.
Need premium license to add people to them.

25
Q

Custom domain

A

Need to add a txt record to your custom domain registrar