Describe Azure management and governance Flashcards

1
Q

For commands on both Azure CLI and Powershell will the:

-Commands work the same on Mac, Linux and windows ?
-Command execution be supported in Azure Cloud shell?
-Command have the option to be executed in an interactive environment ?
-Support GUI ?

A
  • Yes both
  • Yes both
  • Yes both
  • Neither
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Name two destinations from which Azure monitor can collect platform logs and metrics

A

Azure Log analytics work space and An Azure Storage account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Tags are X/Y pairs ? Define X and Y

A

name/value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How can you ensure all required resources are tagged appropriately ?

A

Apply tags manually or create an Azure Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Where will Azure Policy apply tags ?

A

Resource groups or to the subscription to the resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does Application Insights do ?

A

Enable developers to improve app performance and usability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does Resource Health do ?

A

Displays a list of health issues that are related to particular resource.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is an initiative ?

A

A collection of Azure Policy definitions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Can an initiative contain policies located in multiple subscriptions ?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does the Azure pricing calculator do ?

A

Estimates monthly costs associated with using specific Azure resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does Azure Policy do ?

A

Enforce organizational standards and assess compliance at scale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What does Role based Access control do ?

A

Manage resources via built in or custom roles.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What scope is RBAC applied to ?

A

Management groups, subscriptions, resource groups and resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does Azure Advisor do ?

A

Analyzes your resource and makes reccomendations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Name some improvements that Azure Advisor can provide

A

Cost
Performance
High Availability
Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does Azure monitor do ?

A

Collects, analyzes and acts upon data from the cloud or on premise environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What do policies allow ?

A

To specify what type of resources can be used

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What do Resource Groups allow ?

A

To group resources together

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the Azure Hybrid benefit setting ?

A

Allows you to use existing Windows Server licenses to reduce the cost of Azure VMs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does the TCO calculator do ?

A

Compare the price difference between on-prem infrastructure and predicted cloud infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does the Azure Portal do ?

A

Provides a GUI for deploying, managing and monitoring Azure resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Can you use the Azure portal inside the cloud shell ?

A

No. Portal is GUI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How long does health history keep track of inactive events ?

A

90 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What informs you of planned Azure Maintenance ?

A

Health Alerts in Service health

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Which tool should you use to
- Improve the continuity of Critical apps
- Improve app performance
- Detect threats and vulnerabilities
- Reduce overall Azure costs

A

Azure Advisor, the personal cloud consultant.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Give some properties of Azure Advisor

A

Proactive
Actionable
Personalized best practices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is Azure Service Health ?

A

Service Health dashboard helps you track active events.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is Azure Status page ?

A

Provides info about the global availability and health of Azure services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What service can auto scale resources hence minimizing costs and ensuring peak performance levels?

A

Azure Monitor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What does Defender for Cloud do ?

A

SPS

Strengthens security posture
Protects against threats
Secures computing environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Will locks take precedence over RBAC ?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Do locks apply to newly added resources ?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Are locks applied to all users and roles ?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What factors does the TCO take into account ?

A

Compute, storage, bandwidth and management costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What should you always do with RBAC ?

A

Keep additional permissions to a minimum

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Which resource is required to use Azure Cloud Shell

A

Storage account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is a billing zone ?

A

A geographical grouping of Azure regions used to determine billing based upon data transfers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What role grants persmissions to assign access and policies only

A

Access admin role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What roles allows someone to create, update, move, delete and read management groups ?

A

Owner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What should you use to review security recomendations ?

A

Azure Advisor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Which type of data collection requires you to enable diagnostics ?

A

Event logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Can you run Azure Powershell on iOS and Android

A

Yes via Azure mobile app

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is a policy definition ?

A

A JSON file assigned to a scope such as a resource group

44
Q

Where should you export a ARM template from ?

A

Resource or resource group

45
Q

What is Application Insights ?

A

A feature of Azure Monitor that allow visual analyses of telemetry data

46
Q

What does Azure advisor make shutdown recommendations upon ?

A

CPU and outbound network utilization

47
Q

When will Azure monitor begin collecting data ?

A

As soon as you add a new resource

48
Q

Is linux cheaper than windows

A

Yes

49
Q

What Tier should be applied to a single VM ?

A

Basic

50
Q

Are assignments of blueprints updated automatically ?

A

No

51
Q

When you delete a core blueprint will assigned versions of the blueprint remain in place ?

A

Yes

52
Q

What factors affect the cost of an App Service web app in Azure ?

A

Instance type (size of VM)
Number of instances
OS
Region
Tier

53
Q

What is an Azure initiative ?

A

A collection of Azure policies targeted towards reaching a single goal

54
Q

What should you use to understand the data in a cost report ?

A

Tags

55
Q

Do Spot VMs use standard SLA for Azure VMs ?

A

No

56
Q

What does health history do ?

A

Keeps track of the unavailability of your apps (down time)

57
Q

What allows you to recieve sms messages about planned Azure maintenance ?

A

Health Alerts

58
Q

Where should you check for excess usage and potential depreciation of resources ?

A

Health advisories

59
Q

What feature provides information about planned Azure maintenance ?

A

Planned maintenance

60
Q

What feature should you check for problems affecting your resources ?

A

Service issues

61
Q

What 5 factors affect the cost of an app service web app?

A

Instance type
Number of instances
OS
Tier
Region

62
Q

Are WebJobs free

A

Yes

63
Q

Does the type of Application framework affect the cost of an App service web app ?

A

No

64
Q

You need to create and maintain code without the need for scaling infrastructure of your apps. What should you do ?

A

Create an Azure Functions subscription and upload your code there.

65
Q

Are locks applied to specific users and roles ?

A

No

66
Q

Will all policies for an initiative assignment be assessed ?

A

Yes

67
Q

Can an intiative contain policies across multiple subscriptions ?

A

No. Must be located in the same subscription

68
Q

What two locations should you use to export an ARM template for future deployments ?

A

Export the Azure Resource Manager template from a resource or resource group

69
Q

What is Azure dedicated hosts ?

A

An isolated physical server where you run your workload only.

70
Q

How are Azure dedicated hosts charged ?

A

Per dedicated host

71
Q

How is Authentication achieved ?

A

Verification of identity of a person or device

72
Q

Ensuring a username and password is correct, is an example of what ?

A

Authentication

73
Q

Can Azure IoT central be managed as SaaS

A

Yes

74
Q

What kind of service is Azure Database for PostgreSQL ?

A

PaaS

75
Q

What are Tags ?

A

Labels applied to Azure resource to help organize and categorize them.

76
Q

Where would you find the Overall Compliance score and number of passing/failing assessments ?

A

Regulatory dashboard of Microsoft Defender for Cloud

77
Q

What are the benefits of Azure reservations ?

A

Save money by committing to one-year or three-year plans for multiple products.

78
Q

What does the contributor role allow ?

A

Access to manage all resources but does not allow you to assign roles in Azure RBAC

79
Q

What does the owner rule allow ?

A

Full access to manage all resources, including the ability to assign roles in Azure RBAC.

80
Q

What does the reader rule allow ?

A

Lets you view everything, but not make any changes.

81
Q

What does the Virtual Machine Contributor role allow ?

A

Lets you manage virtual machines, but not access to them, and not the virtual network or storage account they’re connected to.

82
Q

By which time interval are VMs billed ?

A

Per second

83
Q

When you delete a virtual machine in Azure, by default, are any disks that are attached to the VM are deleted ?

A

No. Prevents against accidentle data loss

84
Q

Is Bandwidth inbound to Azure free ?

A

Yes

85
Q

Is bandwidth outbound from azure free ?

A

No, your using there resources.

86
Q

What is Azure AD ?

A

Microsoft’s cloud-based identity and access management service, which just helps employees sign in and access resources.

87
Q

What three services make up Azure Service Health ?

A

Azure Status, Service and Resource Health.

88
Q

Can scale sets be deployed in seperate data centers ?

A

Yes via use of availibilty zones, scale sets don’t have to be in the same data center.

89
Q

Which Azure service is application insights a feature of?

A

Azure monitor

90
Q

What platforms does Application insights work with ?

A

.NET, Node.js, Java, Python

91
Q

What is Azure AD connect ?

A

Installs an on-premises service that orchestrates synchronization between your on-premises Active Directory and Azure Active Directory

92
Q

The process of verifying the credentials of the user is…

A

Authentication

93
Q

What is authorization ?

A

The act of granting an authenticated party permission to do something.

94
Q

What is the service trust portal ?

A

A portal that provides access to various content, tools, and other resources about Microsoft security, privacy, and compliance practices

95
Q

What service provides security tokens that you can use for the authentication flow of your cloud-based applications?

A

Azure Active Directory

96
Q

You are tasked to monitor your on-premises identity infrastructure and ensure a reliable connection to Office 365 and Microsoft Online Services. What service should you use?

A

Azure AD Connect Health.

97
Q

What events can Azure Service Health track ?

A

Service issues, planned maintenance, health advisories.

98
Q

What does the cost managment tool do ?

A

Sends alerts when resources use > 90% of the budget

99
Q

Which Azure service sends emails to inform about excess quotas being reached ?

A

Azure monitor Alerts

100
Q

Which Azure feature enables organizations to manage the access, policies, and compliance of their resources in Azure across multiple subscriptions.

A

Management Groups

**Organize Multiple Subscriptions

101
Q

Can resource groups span multiple regions ?

A

Yes

102
Q

What service enables you to correlate trace events from multiple Azure VMs and other resources into a centralized repository?

A

Azure Monitor

103
Q

Is data transfer to Azure to Free ?

A

Yes

104
Q

Is data transfer between availibility zones free ?

A

No

105
Q

Do disks attatched to stopped VMs occur costs ?

A

Yes
you still continue to accrue charges for the Azure storage needed for the VM’s OS disk and any attached data disks even if your virtual machines are already stopped.

106
Q

P1

A

RBAC and CA