Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ 900 > Describe Azure Architecture and Services > Flashcards

Describe Azure Architecture and Services Flashcards

1
Q

Fault tolerance is also known as what?

A

High Availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

When can an organization decommission its private cloud infrastructure hosted in its data center?

A

When all of their servers are in the public cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Company has set up a VPN device on their on-prem that will be used for Sit-to-Site connection from an on-prem location to Azure. What would represent the on-prem VPN device in Azure?

A

Local Network Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Company has a set of IT engineers responsible for implementing and managing the resources in their Azure account. The IT engineers have a set of CLI installed on-prem workstations that have Ubuntu, macOS and Windows 10 machines. What tools can be used on those machines?

A

Azure CLI, Azure Powershell, and Azure Portal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

You found that GRS automatically replicates data from your primary region to a secondary region (also known as Region Pair). So, as part of your business continuity and disaster recovery strategy, your company decided to choose GRS replication for your AZ storage account. So, can we choose the secondary region in the Region Pair where we want to replicate our data?

A

NO - it is not possible to create your own regional pairings. Every Azure Region is paired with another AZ Region for cross-region replication based on proximity. Every Region Pair is at least 300 miles of separation. GRS replication automatically picks secondary region based on this.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Azure App Service/Web Apps

A

Fully managed PaaS service for hosting web apps and performs infrastructure maintenance

Sometimes slow b/c certain code is not written in a performant way.

Enables you to build and host web apps, mobile back ends, and RESTful APIs in the programming language of your choice without managing infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Minimum number of Azure regions needed to comply w 99.99 percent SLA?

A

2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Minimum number of Availability zones needed to comply w 99.99 percent SLA?

A

2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Azure Service Health

A

Get info about AZ service issues and planned maintenance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Pricing Calculator

A

Compare and Predict the costs of AZ services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Service Trust Portal

A

Get info about international standards, compliance documents, and audit results that AZ provides for itself.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

TCO Calculator

A

Compare & Predict the savings after comparing a cloud-hosted solution with an on-prem solution.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Microsoft Defender for Cloud

A

Cloud Security Posture Mgmt (CSPM) and Cloud Workload Protection Platform (CWPP) which tracks security vulnerabilities for on-prem, multi-cloud and hybrid environments

Detects and resolves threats to resources and services not only on VMs but also SQL, storage accts, and other services etc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

AZ Advisor

A

AZ service provides recommendations to implement or maintain well-architected framework principles (cost-effectiveness, performance, reliability)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

AZ Policy

A

Service that helps to Deny the creation of any other resource which is not defined in the list of allowed resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

AZ Blueprint

A

Helps to create a Package that consists of a set of resource groups, policies, role assignments, and ARM template deployments to help w environment setup.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Company wants to deploy small pieces of code onto AZ. They want to cut the costs for hosting the code. What should they consider for hosting the code?

A

Azure Functions - You can use AZ functions to save costs if you want to run small pieces of code.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Azure Functions

A

Cloud service available on-demand that provides all the continually updated infrastructure and resources needed to run your applications; you focus the code that matters most to you, in the most productive language for you, and Functions handles the rest; provides Serverless computing in AZ; used to save costs if you want to run small pieces of code.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Azure Basic Support plan does not include…

A

Access to support engineers; no 24/7 access to tech support by email or phone.

This is only available for Developer (during business hours by email only), Standard and Professional Direct plans.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Management Groups

A

Ability to manage user access to resources across multiple subscriptions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Azure Arc

A

Simplifies governance and mgmt by delivering a consistent multi-cloud and on-prem mgmt platform.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Azure Cloud Shell

A

An interactive shell environment that you can use through your browser; lets you use either bash or PowerShell to work w AZ services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Azure Container Instances

A

Solution for any scenario that can operate in isolated containers, without orchestration; run event-driven apps, quickly deploy from your container development pipelines, and run data processing and build jobs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Azure Virtual Machine

A

IaaS; Traditional option of hosting a website on AZ but needs more time to correctly set up for performance, scalability, durability, and security and also needs to take appropriate care of maintenance activities (upgrades, patches etc)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Azure Service Fabric

A

Distributed systems platform that makes it easy to package, deploy, and manage scalable and reliable microservices and containers; also address significant challenges in developing and managing cloud native apps.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

VM Scale Sets

A

Provide a solution to create and manage a group of identical, load balanced VMs.

27
Q

Azure Virtual Network

A

Provide an isolated environment for hosting of VMs.

28
Q

Azure Data Lake Analytics

A

Provide a cloud service that helps transform data and provide valuable insights on the data itself.

29
Q

Company has VM created in their subscription with an app installed on the VM. You need to ensure traffic can flow into the VM on port 8080. What must be modified to make this work?

A

Network Security Group (NSG) - must be modified to add an inbound security rule.

30
Q

Company has created v network and also launched a set of VMs on the network. They want to change the way the traffic is routed in the v network. What can be used to fulfill this requirement?

A

User Defined Routes

31
Q

Azure Web Apps

A

PaaS solution for web applications

32
Q

Azure Marketplace

A

Easily Search for custom solutions in AZ Marketplace and easily deploy these solutions in AZ

33
Q

Azure SQL Database

A

PaaS

Used if company for example wants to host a set of relational tables w zero administration of underlying infrastructure and low latency access to data

Microsoft handles all patching and updating of the SQL and OS code

34
Q

Azure Cosmos DB

A

Fully managed NoSQL and relational database for modern app development.

Offers single-digit millisecond response times, automatic and instant scalability, along with guarantee speed at any scale. Business continuity is assured with SLA-backed availability and enterprise-grade security.

Also has a table API to work with Table-like data

35
Q

Company planning on creating several policies in the Az policy service. These policies are all meant to achieve a particular goal. What can be used to organize these policies into one group?

A

Initiative Definition - you can club the policy definitions into one Initiative Definition

Singular overarching goal

36
Q

Company wants to have a data store in place that can be used to store video files. These video files will be uploaded by users. What would you use for this purpose?

A

Storage Account - You can use Blob service in AZ storage accounts to store video files

37
Q

You want to create a VM in AZ. You need to allocate 300GB storage for the VM. What disk option would you use for this purpose?

A

New data disk - these disks have a max capacity of around 32tb

Incorrect:
OS disk - every VM has at least 1 attached OS disk w pre-installed OS selected upon creation of VM; max capacity 2048gb

Temp disk - not a managed disk; provides short term storage intended to only store page or swap file data

Local disk

38
Q

Azure VPN Gateway

A

This service is used to help connect an on-prem data center to an Az Virtual Network; used to send encrypted traffic b/w AZ virtual network and on prem location over public internet or b/w Az virtual networks over MS network

39
Q

Company has just set up an AZ subscription and an AZ tenant. What can the company use to create an AZ support request?

A

Azure Portal - accessed in portal via “Help + support”—–>”New support request”

40
Q

Company is planning to set up AZ subscription and AZ tenant using AD. Would the company need to implement domain controllers on AZ virtual machines to use the AD service?

A

No - AD is a completely managed service so you dont need to provision any infrastructure to implement AD

41
Q

You are setting up an Azure Free Account. After 30 days, would certain AZ products still be free to use?

A

Yes - Free account gives access to all AZ services for first 30 days with free credit of $200, after which user would have access only to a subset of AZ services for free

42
Q

Which protocol enables dynamic routing b/w on-prem network and services running in the Microsoft cloud?

A

BGP - Border Gateway Protocol enables dynamic routing b/w on-prem network and MS cloud; ExpressRoute uses BGP

43
Q

Company wants to reduce the costs for resources hosted in Azure. They decide to remove the public IP addresses. Would this fulfill the requirement?

A

Yes - this can reduce the cost since there is a price for Public IP addressing as given in the MS documentation.

44
Q

Company wants to reduce the costs for resources hosted in Azure. They decide to remove the network interfaces from AD. Would this fulfill requirement?

A

No - there is no price for network interfaces so this would not help reduce cost.

45
Q

Company has just set up an AZ subscription and an Az tenant. They want to start deploying resources on the Az platform. They want to use an Az service that could create and update the resources as a group, rather than handling them individually, within the az subscription. Which service could be used for this requirement?

A

Azure Resource Manager

46
Q

Would you be charged for the computing cost of v machine in stopped state?

A

No - when the machine is in the stopped deallocated state the compute costs are no longer charged to the customer.

47
Q

Would you be charged for the underlying disks attached to the v machine in stopped state?

A

Yes - you are always charged for the OS disk attached to the v machine.

48
Q

Would you be charged for the private IP address assigned to the v machine in stopped state?

A

No - you are only charged for the Static Public IP addresses and not for the private IP addresses.

49
Q

How would you ensure that the v machine admin team is restricted to the usage of the available regions for the deployment of new resources?

A

Azure Policies

RBAC incorrect b/c that is used to give authorization to use Az resources

50
Q

How would you ensure that the v machine admin team can only deploy v machines and their dependent resources?

A

Azure Role-Based Access Control (RBAC)

Azure Policies incorrect since this is used to govern the resources in Az

51
Q

Company just started using Az. They have set up resources as part of their subscription. They want to get the current costs being incurred. They decide to use Az Cost Mgmt to get this info. Would this fulfill requirement?

A

Yes - this would give a cost breakdown for resources being used in Az.

52
Q

What are advantages of using hybrid cloud model?

A
  1. Maintain Control
  2. More Flexibility
53
Q

Company has Az v private connection b/w on-prem network and Az v network. Would they need to pay additional costs to transfer several gb of data FROM on-prem network TO Az?

A

No - data transfers TO Az data center are free

54
Q

Company has Az v private connection b/w on-prem network and Az v network. Company expects around 10gb worth of data transfer per month FROM Az TO on-prem network. Would they incur additional costs for this data transfer?

A

Yes - costs are incurred from Az to on-prem

55
Q

Company wants to use Az service that can be used to xfer offline data in a quick, inexpensive, and reliable way.

A

Azure Data Box - physical migration service that helps xfer offline data in a quick, inexpensive and reliable way.

56
Q

Identify the right service category for both advantages/features:
- increases stability, reliability, and supportability
- reduces cap ex and optimizes costs

A

IaaS

57
Q

Company wants to make use of the Az Service Health. Using this service, could the admin create a rule that sends alerts when an Az service fails?

A

Yes - in service health one can go to the ‘health alerts’ section and create a service health alert.

58
Q

Provide the ability to route traffic to backend v machines based on the the attributes of an HTTP request.

A

Az Application Gateway - web traffic load balancer that enables you to manage traffic to your web apps

59
Q

Provide a service that could help store objects that could be accessed from anywhere around the world via HTTP.

A

Azure Storage Accounts

60
Q

Company wants to implement Az AD Identity Protection w following requirements:
- prompt users if credentials are compromised
- identify suspicious login attempts
Which 2 policies implement the above requirements?

A

User risk policy
Sign in risk policy

61
Q

Company wants to move all employees to AD. What is the initial domain where the tenant is created?

A

onmicrosoft.com

62
Q

Company needs a new security model to effectively adapt to the complexity of the modern environment; Embraces the mobile workforce and protects people, devices, applications and data wherever they are. Would defense in depth model fulfill this requirement?

A

No - defense in depth uses a series of mechanisms to slow the advance of an attack that aims at acquiring unauthorized access to data.

Correct solution is “Zero Trust security model”

63
Q

Company is planning to use Az Cosmos DB service. Would company need to manage indexes on the Cosmos DB server?

A

No - it’s fully managed; No schema or index management needed

64
Q

Company has deployed 6 v machines to Az. The v machines would be hosting a web app. Users would be using the web app from the internet. Would the use of an Az load balancer help to increase the availability of the web app?

A

Yes, you can achieve higher availability for your apps by adding a load balancer to the architecture.

AZ 900 (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions