Describe Azure management and governance Flashcards

1
Q

For commands on both Azure CLI and Powershell will the:

-Commands work the same on Mac, Linux and windows ?
-Command execution be supported in Azure Cloud shell?
-Command have the option to be executed in an interactive environment ?
-Support GUI ?

A
  • Yes both
  • Yes both
  • Yes both
  • Neither
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Name two destinations from which Azure monitor can collect platform logs and metrics

A

Azure Log analytics work space and An Azure Storage account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Tags are X/Y pairs ? Define X and Y

A

name/value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How can you ensure all required resources are tagged appropriately ?

A

Apply tags manually or create an Azure Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Where will Azure Policy apply tags ?

A

Resource groups or to the subscription to the resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does Application Insights do ?

A

Enable developers to improve app performance and usability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does Resource Health do ?

A

Displays a list of health issues that are related to particular resource.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is an initiative ?

A

A collection of Azure Policy definitions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can an initiative contain policies located in multiple subscriptions ?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does the Azure pricing calculator do ?

A

Estimates monthly costs associated with using specific Azure resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does Azure Policy do ?

A

Enforce organizational standards and assess compliance at scale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does Role based Access control do ?

A

Manage resources via built in or custom roles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What scope is RBAC applied to ?

A

Management groups, subscriptions, resource groups and resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does Azure Advisor do ?

A

Analyzes your resource and makes reccomendations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Name some improvements that Azure Advisor can provide

A

Cost
Performance
High Availability
Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does Azure monitor do ?

A

Collects, analyzes and acts upon data from the cloud or on premise environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What do policies allow ?

A

To specify what type of resources can be used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What do Resource Groups allow ?

A

To group resources together

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the Azure Hybrid benefit setting ?

A

Allows you to use existing Windows Server licenses to reduce the cost of Azure VMs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does the TCO calculator do ?

A

Compare the price difference between on-prem infrastructure and predicted cloud infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does the Azure Portal do ?

A

Provides a GUI for deploying, managing and monitoring Azure resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Can you use the Azure portal inside the cloud shell ?

A

No. Portal is GUI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How long does health history keep track of inactive events ?

A

90 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What informs you of planned Azure Maintenance ?

A

Health Alerts in Service health

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Which tool should you use to - Improve the continuity of Critical apps - Improve app performance - Detect threats and vulnerabilities - Reduce overall Azure costs
Azure Advisor, the personal cloud consultant.
26
Give some properties of Azure Advisor
Proactive Actionable Personalized best practices
27
What is Azure Service Health ?
Service Health dashboard helps you track active events.
28
What is Azure Status page ?
Provides info about the global availability and health of Azure services.
29
What service can auto scale resources hence minimizing costs and ensuring peak performance levels?
Azure Monitor
30
What does Defender for Cloud do ?
SPS Strengthens security posture Protects against threats Secures computing environment
31
Will locks take precedence over RBAC ?
Yes
32
Do locks apply to newly added resources ?
Yes
33
Are locks applied to all users and roles ?
Yes
34
What factors does the TCO take into account ?
Compute, storage, bandwidth and management costs
35
What should you always do with RBAC ?
Keep additional permissions to a minimum
36
Which resource is required to use Azure Cloud Shell
Storage account
37
What is a billing zone ?
A geographical grouping of Azure regions used to determine billing based upon data transfers
38
What role grants persmissions to assign access and policies only
Access admin role
39
What roles allows someone to create, update, move, delete and read management groups ?
Owner
40
What should you use to review security recomendations ?
Azure Advisor
41
Which type of data collection requires you to enable diagnostics ?
Event logs
42
Can you run Azure Powershell on iOS and Android
Yes via Azure mobile app
43
What is a policy definition ?
A JSON file assigned to a scope such as a resource group
44
Where should you export a ARM template from ?
Resource or resource group
45
What is Application Insights ?
A feature of Azure Monitor that allow visual analyses of telemetry data
46
What does Azure advisor make shutdown recommendations upon ?
CPU and outbound network utilization
47
When will Azure monitor begin collecting data ?
As soon as you add a new resource
48
Is linux cheaper than windows
Yes
49
What Tier should be applied to a single VM ?
Basic
50
Are assignments of blueprints updated automatically ?
No
51
When you delete a core blueprint will assigned versions of the blueprint remain in place ?
Yes
52
What factors affect the cost of an App Service web app in Azure ?
Instance type (size of VM) Number of instances OS Region Tier
53
What is an Azure initiative ?
A collection of Azure policies targeted towards reaching a single goal
54
What should you use to understand the data in a cost report ?
Tags
55
Do Spot VMs use standard SLA for Azure VMs ?
No
56
What does health history do ?
Keeps track of the unavailability of your apps (down time)
57
What allows you to recieve sms messages about planned Azure maintenance ?
Health Alerts
58
Where should you check for excess usage and potential depreciation of resources ?
Health advisories
59
What feature provides information about planned Azure maintenance ?
Planned maintenance
60
What feature should you check for problems affecting your resources ?
Service issues
61
What 5 factors affect the cost of an app service web app?
Instance type Number of instances OS Tier Region
62
Are WebJobs free
Yes
63
Does the type of Application framework affect the cost of an App service web app ?
No
64
You need to create and maintain code without the need for scaling infrastructure of your apps. What should you do ?
Create an Azure Functions subscription and upload your code there.
65
Are locks applied to specific users and roles ?
No
66
Will all policies for an initiative assignment be assessed ?
Yes
67
Can an intiative contain policies across multiple subscriptions ?
No. Must be located in the same subscription
68
What two locations should you use to export an ARM template for future deployments ?
Export the Azure Resource Manager template from a resource or resource group
69
What is Azure dedicated hosts ?
An isolated physical server where you run your workload only.
70
How are Azure dedicated hosts charged ?
Per dedicated host
71
How is Authentication achieved ?
Verification of identity of a person or device
72
Ensuring a username and password is correct, is an example of what ?
Authentication
73
Can Azure IoT central be managed as SaaS
Yes
74
What kind of service is Azure Database for PostgreSQL ?
PaaS
75
What are Tags ?
Labels applied to Azure resource to help organize and categorize them.
76
Where would you find the Overall Compliance score and number of passing/failing assessments ?
Regulatory dashboard of Microsoft Defender for Cloud
77
What are the benefits of Azure reservations ?
Save money by committing to one-year or three-year plans for multiple products.
78
What does the contributor role allow ?
Access to manage all resources but does not allow you to assign roles in Azure RBAC
79
What does the owner rule allow ?
Full access to manage all resources, including the ability to assign roles in Azure RBAC.
80
What does the reader rule allow ?
Lets you view everything, but not make any changes.
81
What does the Virtual Machine Contributor role allow ?
Lets you manage virtual machines, but not access to them, and not the virtual network or storage account they’re connected to.
82
By which time interval are VMs billed ?
Per second
83
When you delete a virtual machine in Azure, by default, are any disks that are attached to the VM are deleted ?
No. Prevents against accidentle data loss
84
Is Bandwidth inbound to Azure free ?
Yes
85
Is bandwidth outbound from azure free ?
No, your using there resources.
86
What is Azure AD ?
Microsoft’s cloud-based identity and access management service, which just helps employees sign in and access resources.
87
What three services make up Azure Service Health ?
Azure Status, Service and Resource Health.
88
Can scale sets be deployed in seperate data centers ?
Yes via use of availibilty zones, scale sets don't have to be in the same data center.
89
Which Azure service is application insights a feature of?
Azure monitor
90
What platforms does Application insights work with ?
.NET, Node.js, Java, Python
91
What is Azure AD connect ?
Installs an on-premises service that orchestrates synchronization between your on-premises Active Directory and Azure Active Directory
92
The process of verifying the credentials of the user is...
Authentication
93
What is authorization ?
The act of granting an authenticated party permission to do something.
94
What is the service trust portal ?
A portal that provides access to various content, tools, and other resources about Microsoft security, privacy, and compliance practices
95
What service provides security tokens that you can use for the authentication flow of your cloud-based applications?
Azure Active Directory
96
You are tasked to monitor your on-premises identity infrastructure and ensure a reliable connection to Office 365 and Microsoft Online Services. What service should you use?
Azure AD Connect Health.
97
What events can Azure Service Health track ?
Service issues, planned maintenance, health advisories.
98
What does the cost managment tool do ?
Sends alerts when resources use > 90% of the budget
99
Which Azure service sends emails to inform about excess quotas being reached ?
Azure monitor Alerts
100
Which Azure feature enables organizations to manage the access, policies, and compliance of their resources in Azure across multiple subscriptions.
Management Groups **Organize Multiple Subscriptions
101
Can resource groups span multiple regions ?
Yes
102
What service enables you to correlate trace events from multiple Azure VMs and other resources into a centralized repository?
Azure Monitor
103
Is data transfer to Azure to Free ?
Yes
104
Is data transfer between availibility zones free ?
No
105
Do disks attatched to stopped VMs occur costs ?
Yes you still continue to accrue charges for the Azure storage needed for the VM’s OS disk and any attached data disks even if your virtual machines are already stopped.
106
P1
RBAC and CA