Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Subjects > Exam 70-534 > Flashcards

Exam 70-534 Flashcards

1
Q

What is a key strategy to improve service availability in the cloud?

A

Reduce MTTR (Mean Time to Recover)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are 2 ways to avoid service throttling limits?

A

Application level caching

CDN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Azure has been verified for what 4 compliance programs?

A

ISO 27001/27002
FedRAMP
HIPPAA
EU Model Clauses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How does a service qualify for SLA?

A

Must use availability set with at least 2 instances (running same functions)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

A VM can have 4 types of IP addresses associated with it, name them?

A

Public virtual IP - VIP
Dynamic private IP - DIP
Static Public IP
Static privateip

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the 3 default tags for an NSG?

A

VIRTUAL_NETWORK - all network address space on VNET
AZURE_LOADBALANCER - ip addresses from which health probes originate
INTERNET - all IP addresses outside the VNET

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Name the 5 NSG rule fields or pairs?

A 
Source ip/source port
Target ip/target port
Protocol (tcp,udp or all)
Priority
Access
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the 4 ACL rule fields?

A

Number
Remote subnet
Endpoint
Permit/Deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is CIDR?

A

Classless Internet Domain Routing
Short hand notation for subnet mask. 255.0.0.0 uses 8 bits so its /8 and 255.255.0.0 uses 16 bits so its /16
Ex: 10.0.0.0/8 is ip of 10.0.0.0 with subnet mask 255.0.0.0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Why can performance of large virtual networks suffer?

A

Like a large network of roads, packets collide and slow down. Subnets can help control and limit traffic.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

If you borrow 3 bits from the host id for the network id how many subnets can you create?

A

8 = 2 raised to power of 3
0, 32, 64, 96, 128, 160, 196, 224
So 10.32.0.0 would be first address on second subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Each VM has at least 2 associated ip addresses, what are they?

A

A public facing virtual ip

Internal dynamic ip

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Where does a vip come from?

A

A public pool of ip addresses managed by microsoft. (Not assigned directly to vm , is assigned to cloud service)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a PIP?

A

An instance level public IP that is assigned directly to a VM. Appropriate for large workloads that use a lot of ports.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

When you create a vm on azure what is accessible by default?

A

Remote desktop and powershell for windows instances

Ssh for linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is an endpoint?

A

An ip address and port

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

A VM has VIP and a DIP. The VIP is associated with load balancer which forwards it to?

A

DIP with a private port on a VM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

The FQDN name is specified by?

A

The name of the cloud service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Endpoints are for public access, why are they not needed for private access?

A

Each machine in vnet can already talk to each other

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What VM series is for general compute?

A 
A series
A0 = extra small
A1 = small
A2 = medium
A3 = large
A4 = extra large
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is windows power shell DSC?

A

Desired state configuration

Instead of building the configuration you specify what the desired end state should be in script

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Custom Script Extension?

A

Downloads run scripts from Azure blob storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What compute series should be used for high performance IO?

A

DS series

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How many drives can you attach to a standard_G5 series vm?

A

64

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is the format of an Azure Resource Template?

A

JSON

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What 4 technologies can help manage consistent state of VMs?

A

Custom Script Extension (cse)
Chef or Puppet
Azure Automation (using Azure Resource Templates)
Containerization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are 3 methods of connecting to a hybrid cloud?

A

Point to site vpn - vpn client to any vm or cloud service
Site to site vpn - extends local network to cloud
Express route - connects on prem data centers to azure data centers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Can you connect 2 azure vnets with a vpn connection?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

How do you connect multi-site connections to allow multiple on-prem networks?

A

Azure virtual network gateway (hub and spoke)

Image of 2 on-prem networks each using a vpn device to connect to a gateway in cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is service bus relay?

A

Allows a local wcf service to register a relay endpoint to allow access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is Express Route?

A

A private dedicated connection between on prem data center and azure data center

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is the max bandwidth of express route?

A

10 gbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What protocol does site to point vpn use?

A

SSTP Secured Socket Tunneling Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What are the limitations of site to point vpn?

A

Because each site connects through a gateway, you are limited by the number of s2s tunnels the gateway supports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What do you need for site 2 site vpn connections?

A

A public facing ipv4 address and a compatible vpn device or RRAS running on win server 2012 , works both ways

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What are the 2 ways to use Express Route to connect to Azure?

A

Connect Azure through an exchange provider location

Connect Azure through a network service provider

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Traffic manager can route traffic based on what?

A

Availability and performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What 3 methods can traffic manager use to decide which edpoints to route traffic?

A

Round-robin
Failover
Performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What protocols are accepted by Azure AD?

A

Ws-federation
Saml 2.0
OpenID connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

To ensure confidentiality, integrity, and authenticity of security tokens what 4 techniques can be used?

A

HTTPS
Digital signature
Encryption
Token expiration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

To interact with AAD objects what are the 2 options?

A

Graph API

ADAL and AD graph client library

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

In a claims based architecture what issues security tokens?

A

Identity Provider

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is a claims based architecture?

A

A system design that uses an external party to manage identities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is a securable identity?

A

A user, application or service identity that makes service requests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is a claim

A

An assertion made on an attribute of an entity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is a security token?

A

A collection of claims

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What is a service provider in context of claims architecture?

A

A relying party that relies on third party manage identities on its behalf

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What does an identity provider do?

A

Authenticates entities and issues security tokens to relying parties. The relying party can use claims in the token for authorization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What is a trust relationship?

A

Ties an identity provider and service provider together

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What other services beyond identity provider does AAD provide?

A

Multi-factor authentication
Centralized application access panel to manage access to SaaS applications
An app proxy yo manage access for remote access to on prem services
Graph api to interact directly with AD objects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What is ADAL?

A

Azure AD Authentication Library - facilitates authentication with both cloud and on-prem directories, automatically refreshes expired access tokens

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What 3 tiers are AAD offered in?

A

Free
Basic
Premium
Last 2 only available through enterprise licensing, come with sla, mfa, reports, machine learning

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Difference between ADDS and AAD?

A

Use different protocols such as kerberos, ldap vs saml2 wsfederation, openid connect, graph api
No forests, domains, ou’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

What 3 parties are involved in a basic claims based Authentication workflow for a web app?

A

User Agent (Browser)
Identity Provider
Service Provider

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What 4 parties are involved for oAuth 2.0 native app auth workflow?

A

User Agent (Native app)
Authorization Service
Token Service
Service Provider

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What 5 parties are involved in a multi-tiered application workflow sometimes referred o as a trusted sub-system?

A 
User Agent (native app)
Authorization Service
Token Service
Front End
Business Tier
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What does ADFS allow you to do?

A

Allow cloud based apps to use on premises ADDS user credentials to authenticate using standard protocols and SAML tokens

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What is advantage of using Directory Syncing with AdFS?

A

Centralized management plane

Monitoring, analysis and self serve capabilities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What are 3 methods of syncing aad and on prem adds?

A

AAD Sync
DirSync
FIM /AAD connector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What are 3 core concepts of DirSync?

A

Connector space
Metaverse
Sync rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What does AD Application Proxy do?

A

Expose on prem applications to the cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

When you have 2 accounts representing same user in different forests with same email what is best way to handle?

A

Use matching rules ro match both accounts by email address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Name 4 identity providers supported by ACS

A

Microsoft account
Facebook
Yahoo
AD FS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

What can you do by defining claim rules?

A

Claim types can be changed during token transformation
Change claim values
Pass through

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

During auth workflow what roles does ACS play?

A

Auth broker
Identity provider
Relying party

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

What does a claim rule do?

A

Defines how a claim from identity provider should be transformed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

What is OWIN?

A

Open spec that defines layer between web servers and web apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

What is middleware?

A

Layers of components that are chined together into a pipeline before they reach the application. Ex: authentication, logging, …

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

What do you need to do before enabling social network as an identity provider?

A

Register app with provider and retrieve token/username, secret …

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

Name 3 Azure solutions for backup and recovery?

A

Backup
StorSimple
Site recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

Name the 4 storage replication models supported by Azure.

A

Locally redundant storage (LRS)
Zone Redundant Storage (ZRS)
Geo-redundant Storage (GRS)
Read-Access Geo-Redundant Storage (RA-GRS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

What 4 types of storage does Azure Storage offer?

A

BLOB Storage
Table Storage (no sql key value)
Queue Storage
File Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

Does Azure provide an out of box encryption feature for Azure Storage?

A

Nope

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

How many keys does each storage account have?

A

2 - primary and secondary

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

What level of protection do Shared Access Keys (SAS) provide?

A

Direct Access to containers, BLOBs, queues, tables, table rows with R/W with a span of time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

What do Shared Access Policies (SAP) allow you to do?

A

Manage SASs in bulk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

What roles do AAD support?

A

GBPUS + user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

What 3 roles does AZ service bus support?

A

Admin, receiver, sender

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

How many replicas does Azure SQL have at any given time?

A

3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

Where does AZ SQL automatically store your most recent backups?

A

A different geo-graphical location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

Where does AZ SQL store your backups when using Active geo-replication?

A

4 geo-replicated live secondaries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

What does Azure Rights Management do?

A

Data access travels with you data
Encryption/ decryption
Manage and track key distributions
Key management and data access policies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

What is Azure Key vault?

A

Protects keys and secrets in cloud with a Hardware Security Module

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

To join a device to a workplace which Azure service should be used?

A

Device registration servicewh

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

What are 4 self service features of AAD?

A

Reset password
Manage group members
Request to join a group
Invite external members

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

What are the 4 types of storage in a storage account?

A

Blob
Table
Queue
File share

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

What are queues used for?

A

Decouple components of a system (scalability)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

What is table storage used for?

A

Use to store structured non relational data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

What is blob data used for?

A

Stores large amounts of unstructured data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

What is file storage for?

A

Shared storage that uses SMB (server message block) 2.1 or api

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

How big of a db can az sql store?

A

500 gb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

What does sql azure not have?

A 
Sql agent
Sql profiler
Native encryption service broker
CLR
distributed transactions or views
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

Howmuch data can document db store per capacity unit?

A

10gb, 2000 reads per second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

What is needed to access storage accounts?

A

Account name and access keys
SAS
Shared access policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

AZ SQL tier storage sizes?

A

Basic - 2gb
Standard - 250 gb
Premium - 500 gb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

What are max dtu, database size, worker threads, sessions for all 3 tiers?

A 
Basic = 5 dtu, 2gb size, 30 threads, 300 sessions
Standard = 100 dtu, 250 gb, 200 threads, 2400 sessions
Premium = 800 dtu, 500 gb, 1600 threads, 19,200 sessions
97
Q

What are 3 main features of mobile services?

A
  • create a proxy to a data source
  • authentication with builtin support for social providers and ad
  • push notifications to all mobile platforms
98
Q

What are the 2 basic steps to consume mobile services on any platform?

A

Add reference to mobile service client

Create an instance of MobileServiceClient that points to url of service and uses application key

99
Q

What are the 4 modes for api auth in a mobile service?

A
  • application key (only for dev)
  • everyone
  • authenticated users (user id and matching auth token)
  • admins and other scripts (master key)
100
Q

What are the six elements of an azure resource template?

A 
$schema
Content version
Parameters
Variables
Resources
Outputs
101
Q

What is the difference between the push notification directly in mobile services and using the notification hub?

A

Hub is much larger scale

102
Q

Each notification platform requires an api key, certificate or secret, where do you get them?

A

Obtain from the dev store account

103
Q

What are some of the advantages of notification hubs?

A
  • supports more device types
  • avoid storing device info in mobile service
  • register and use tags to work with large groups
  • can use templates to push specific data
  • set up triggers for sensitive data
104
Q

Basic and standard azure websites can be scaled out to how many instances?

A

3 and 10

105
Q

Autoscaling is only available at what level?

A

Standard

106
Q

What is a webjob?

A

A script or executable that run in a website to handle long running jobs

107
Q

What file types can webjobs use?

A
  • cmd, bat, exe (windows)
  • ps1 (powershell)
  • sh (bash)
  • php
  • py (python)
  • js (node)
108
Q

If a webjob needs to have additional files for data or dlls what fo you do?

A

zip and upload all the files

109
Q

What 3 modes can webjobs run in?

A

Continuously
Scheduled
On demand

110
Q

If a webjob is setup to run continuously how should it be written?

A

In a continuous loop or use the Webjob sdk

111
Q

Continuous webjobs will run on how many instances of your site?

A

All by default, can be configured to run on a single

112
Q

How many copies run for on demand or scheduled webjobs run on?

A

A single copy

113
Q

How can you deploy webjobs?

A

Management portal (required for scheduled)
Preview management portal?
Ftp (app_data/jobs folder)

114
Q

What are 3 methods of securing a WebAPI?

A

Azure AD
AD FS
ACS (Azure Access Control Service)

115
Q

If you have an Webapi app only for company intranet how should you secure it?

A

Windows Auth

116
Q

How can you set up a mobile service or web site to an on-prem database?

A

Use Biztalk api hybrid connector

117
Q

What does service bus relay do?

A

Securely expose on-prem WCF services to public cloud

118
Q

What is the max number of networks you can connecting via vpn to other networks?

A

10

119
Q

What are the 2 ways you can join VMs and cloud services to domain

A

Windows power shell

Add code to cloud service itself

120
Q

When adding code to join a domain to cloud service, what entry point do you use?

A

RoleEntryPoint

121
Q

What are 2 ways join vms to a domain?

A

Manual

Powershell

122
Q

What 2 security models does Media Services support?

A

AES Clear Key dynamic encryption

Playready DRM Technology

123
Q

What 2 steps are needed to set up live streaming?

A

Configure a channel

Add a program to it

124
Q

What does Media Indexer do?

A

Make media files searchable

Transcript for close captioning

125
Q

What is immediate consistency vs eventual?

A

When an entity is updated all servers will have a consistent view for everyone or for eventual can see different data until synced

126
Q

Pessimistic concurrency vs optimistic

A

Pessimistic uses a lock on data vs assuming it wont be in use

127
Q

What are typical usage of data types for sql, blob, no sql, azure search?

A

Sql for transactional
Azure blob storage for large binary files
Document db for loosely structured data
Azure search for indexing free-text files

128
Q

What is layered storage?

A

Frequently queried stays in cache while cold data is stored in cheaper storage

129
Q

How many replicas does Azure storage use by default?

A

3 across different geo-graphic regions

130
Q

How does sql azure protect its data?

A

Data is backed by multiple active secondaries that automatically step in

131
Q

What is a common practice to scaled data stores?

A

Sharding

132
Q

What are 4 components of a big data solution?

A

Event hubs
Stream analytics
Machine learning
Power bi

133
Q

What are 4 azure services you can use to connect on-premise resources?

A

Biztalk API hybrid connector
Service bus relay
Azure app proxy
Azure virtual network

134
Q

What is a basic way to troubleshoot website in azure?

A

Monitor

135
Q

What is Site Control Manager?

A

SCM is a tool for debugging website

136
Q

What languages does Azure support?

A 
.net
Java
Node
Php
Python
(Ruby not in app service)
137
Q

What was App Service web apps called previously?

A

Azure websites

138
Q

Web apps and web sites are same thing?

A

True

139
Q

Cloud Services are the old and first way to create a website, what components did they have?

A

Web Roles, Worker Roles

WCF service web role

140
Q

What are azure site extensions?

A

A feature of appservices that allow you to create and deploy custom admin functionality

141
Q

A web deploy package includes what?

A

A cmd file that can be customized
All the files zipped
A couple xml files for changing params
Readme.txt file

142
Q

What is an app service plan?

A

A way to group apps and services so they can logically be scaled and managed together

143
Q

How does a slot swap work?

A

Exchanges only pointers and names

144
Q

What are the ways of deploying to an app service?

A

Web deploy - visual studio
Ftp
Source control
Dropbox

145
Q

What is elastic scale for db?

A

Same as shards

146
Q

What is sql sync?

A

Allows az sql to sync data to other db’s, not a replacement for replication

147
Q

what is sql geo-replication?

A

Sets up replica databases in other data centers for dr. Requires standard or higher

148
Q

What tier is backup and restore for web apps available?

A

Standard or higher

149
Q

What is system center?

A 
A suite of tools for managing and monitoring systems. There are 8 tools:
Operations manager (SCOM
Config manager
Virtual machine manager
Orchestrator
Data protection manager
Service mananger
App controller
Endpoint protection
150
Q

What is a cloud distribution point?

A

Allows you to update to azure vm’s directly

151
Q

What is the fastest nd easiest way to deploy all or most components of system center?

A

Powershell deployment toolkit

152
Q

Azure site recovery can manage replication and orchestration of site failres

A

True

153
Q

Using azure with system center data protection manager to store off site data can shorten data recovery time and complexity

A

True

154
Q

What are some third party cloud monitoring tools?

A

CloudNinja
New Relic
AzureWatch
AppDynamics

155
Q

What is Global Service Monitor?

A

An Azure cloud service used to monitor availability of public websites

156
Q

What is application insights?

A

Displays metrics for app service

157
Q

What is RPO/

A

Recovery point objective - max time data loss can occur

158
Q

What is RTO?

A

Recovery time objective - amount of time a system can be unavailable

159
Q

What are SLAs for compute, sql, storage?

A

Compute 99.95 / 21.6 min
Sql 99.9 /43.2
Storage 99.9 / 43.2

160
Q

In Azure PowerShell, what does OB stand for?

A

Online Backup
Examples: Get-OBPolicy retrieves current backup policy which includes the schedule
Start-OBBackup -Policy $policy -Force executes a backup now

161
Q

What workloads does Data Protection Manager support?

A

Server backups - volumes, files, folders, shares
Client backups - files, folders, shares
SQL server
Sharepoint - farms, db, front end web servers
Hyper-V VM, hosts, vhd, files, folders, volumes
Guest-level backup of VM - application level
Exchange

162
Q

Be aware that hosting Data Protection Manager in Azure limits you to 16 volumes on a drive

A

True

163
Q

What protocol does StorSimple use to link data storage?

A

ISCSI so storage in Azure is presented as locally attached volumes

164
Q

What is best use case for StorSimple?

A

Use when you want local storage that is very fast and scalable for tiering data in Azure

165
Q

When is Data Protection Manager a best use case?

A

When a restore needs to happen before accessing data (no live-access)

166
Q

What type of backup and restore is possible with Azure backup?

A

Block level backup with file restore

167
Q

What Power shell commands can be used to authenticate PS to Azure?

A

Add-AzureAccount
Get-AzurePublishSettingsFile
Import-AzurePublishSettingsFile

168
Q

Does the publishSettingsFile have certificate credentials embedded in it?

A

Yes, delete after use

169
Q

What does Get-AzureAccount cmdlet do?

A

List accounts of which Windows PowerShell is aware

170
Q

What does Remove-AzureAccount do?

A

Removes an Azure account from PS, not Azure

171
Q

What does Get-Help -example cmdlet do?

A

Gets help and example scripts to run a command

172
Q

After authenticating to Azure with PS what do you need to do?

A

Set the subscription with Set-AzureSubscription

Could be helpful to call Get-AzureSubscription to get list

173
Q

Basic PS constructs

A

$ is a variable
$_ is THIS token
| pipe is take output and pass it to another command for chaining
‘ back tick is continue command on next line
# is single line comment
## multi line comment
$() is evaluate sub expression in parens

174
Q

Built in PS variables

A

$true, $false, $PSVersionTable, $HOME

175
Q

Primary commands for working with VMs

A

Get-AzureVM - list vms
New-AzureVMConfig - create a new vm config object
Add-AzureProvisioningConfig - adds provisioning configuration to vm
Set-AzureSubnet - sets the subnet list for a vm configuration
New-AzureVM -adds a new vm to existing AZ service or creates new vm and service in current subscription
Remove-AzureVM
Restart-AzureVM
Start-AzureVM
Stop-AzureVM

176
Q

Working with Storage cmdlets

A 
New-AzureStorageAccount
Get-AzureStorageKey
New-AzureStorageContext
Set-AzureStorageBlobContent - upload a file to container and context
New-AzureStorageContainer
177
Q

Azure PS command to retrieve primary storage account

A

$StorageAccountKey = Get-AzureStorageKey $storeName | %{ $_.Primary }

178
Q

Exam tip: find powershell workflows in management portal, go to main section look for automation

A

True

179
Q

What is an azure workflow also refrred to as?

A

Runbook

180
Q

What is a runbook do?

A

Allows you to automate or orgastrate the creation, deployment, maintenance and monof services and resources in Azure

181
Q

What is Desired State Configuration?

A

Automated process of forcing a desired configuration onto a system

182
Q

What are other tools for Azure Automation?

A

Chef, Puppet, Azure Automation

183
Q

What is the valet key pattern?

A

Offload secure storage reads or writes off of web and provide token so storage can handle it

184
Q

What is resiliency?

A

Resiliency is the ability of a system to gracefully handle and recover from failures

185
Q

What are transient errors?

A

Error conditions that are resolved simply be retrying your request (typically a few milliseconds later) are referred to as transient faults

186
Q

What is the retry pattern?

A

Use of a retry policy to retry application logic for transient faults

187
Q

What are http codes you would not do a retry on?

A

400, 401, 404

188
Q

What are http codes you would retry on?

A

408, 429,503, 520

189
Q

What are 3 basic functions of all message queues?

A

Post a message
Retrieve a message
Peek if there is a message to avoid blocking when try to retrieve from an empty queue

190
Q

What is the competing consumer pattern?

A

Producers create messages and multiple consumers process messages. (Compete to process)

191
Q

What are the 2 primary methods of application caching?

A

In-memory cache - issues with syncing across instances

Shared cache - as a separate service

192
Q

What is the Cache-aside pattern?

A

Determine if item is in cache
If not retrieve from data store
Store a copy of item in cache

193
Q

Which retry strategy is ideal for applications that process large amounts of data and send the data to the back-end service in a high throughput fashion

A

Random exponential backoff intervals

194
Q

Difference between azure queues and storage bus queues?

A

As a solution architect/developer, you should consider using Storage queues when:
Your application must store over 80 GB of messages in a queue, where the messages have a lifetime shorter than 7 days.

Your application wants to track progress for processing a message inside of the queue. This is useful if the worker processing a message crashes. A subsequent worker can then use that information to continue from where the prior worker left off.

You require server side logs of all of the transactions executed against your queues.

As a solution architect/developer, you should consider using Service Bus queues when:

Your solution must be able to receive messages without having to poll the queue. With Service Bus, this can be achieved through the use of the long-polling receive operation using the TCP-based protocols that Service Bus supports.

Your solution requires the queue to provide a guaranteed first-in-first-out (FIFO) ordered delivery.

You want a symmetric experience in Azure and on Windows Server (private cloud). For more information, see Service Bus for Windows Server.

Your solution must be able to support automatic duplicate detection.

You want your application to process messages as parallel long-running streams

Your solution requires transactional behavior and atomicity when sending or receiving multiple messages from a queue.

The time-to-live (TTL) characteristic of the application-specific workload can exceed the 7-day period.

Your application handles messages that can exceed 64 KB but will not likely approach the 256 KB limit.

You deal with a requirement to provide a role-based access model to the queues, and different rights/permissions for senders and receivers.

Your queue size will not grow larger than 80 GB.

You want to use the AMQP 1.0 standards-based messaging protocol.

Your messaging solution must be able to support the “At-Most-Once” delivery guarantee without the need for you to build the additional infrastructure components.

You would like to be able to publish and consume batches of messages.

195
Q

Azure app services consist of what 4 services?

A

Web apps
Mobile app services
API apps
Logic apps

196
Q

What 4 languages can web apps in azure be written in?

A

Asp.Net
Ruby?
Python
Java

197
Q

What is an App-Service Plan?

A

Free
Shared
Basic (reserved VM)
Standard (reserved VM)

App Service Plans represent an assignment of features and capacity for multiple services within App Service. Each Mobile, Logic, Web or API App must be associated with an App Service Plan which dictates both the features available, capacity available and billing for the services. The App Service Plans are grouped into the following tiers:

198
Q

What are different ways to can deploy to a web app in app service?

A 
FTP
WebDeploy
Manual Upload to wwwroot folder (not recommended)
Visual Studio Monaco Site Extension
Continous Deployment from Source Control or Storage Providers
GitHub
Visual Studio Online
BitBucket
DropBox, one drive
External Git Repository
Local Git Repository
199
Q

What does a web deploy package contain?

A

Xml manifest file
Cmdline script
Zip file with assets for deployment

200
Q

What is azure service fabric?

A

Its azure’s new model for containers

201
Q

What type of exe’s can you run in a web job?

A 
cmd
bat
exe (.nET)
ps1 (PowerShell)
sh
php
py (Python)
js (Node)
jar
202
Q

What 2 ways can a webjob be run?

A

Continuously

Scheduled/manual

203
Q

Can you backup and restore web apps in azure?

A

Yes, can be done in portal, manually or automatically

Includes, database and configuration and can be restored to existing or new app service

204
Q

What are the main 3 use cases of traffic manager?

A

Failover - priority order if an instance is down
Geography - direct to closest location that is available
Distribution- can deliver near random traffic to prioritized or weighted endpoints

205
Q

How do you configure traffic manager?

A

After setting up traffic manager on azure, add a cname record to dns to point at traffic manager which will resolve dns query based on config

206
Q

What are App Service Environments?

A

When you need more control of your PaaS environment ASE allows you to:
Configure network access and isolation (subnets, NSGs, connect app to a VNet)
Scale using pools and instances far beyond regular app service plans
ASE is dedicated to your application alone

207
Q

An app service has a public endpoint that cannot be removed, what about an ASE?

A

ASE allows web apps to be placed in VNETS that so not have to have a pubic endpoint and do not by default

208
Q

Can you run an App Service on Linux?

A

Yes, it deploys a docker containerized web app from docker hub, private registry or built in

209
Q

Can you deploy a My-SQL db in a web app?

A

Yes, for dev/test scenarios you can deploy an in-app mysql instance accessible only through localhost. If you deploy to production you must use a MYSQL on a vm or using marketplace

210
Q

What are DTUs?

A

Data Throughput Unit used to measure database performance of sql server in azure. It is a blend of cpu, memory, reads and writes

211
Q

What are the 3 service tiers for SQL DB?

A

Basic - 5 dtu, 2gb size, performance by hour
Standard (s0-s3) - up to 100 dtu, 250 gb, perf by minue
Premium (p1-p3) - up to 1000 dtu, 500 gb, perf by sec

212
Q

What are the 4 layers of sql Azure architecture?

A

Client - tools
Services - billing, connection, allocation
Platform - where server and data lives
Infrastructure - hypervisor management

213
Q

What are 4 methods you can use to migrate on-prem existing db’s to sql azure?

A

Azure websites migration assistant
Sql database migration wizard
SSIS
Import bacpac files

214
Q

What are 3 primary concepts of Resource manager?

A

Resource - an instance of a service
Resource group - a logical container for grouping of resources
Resource group template - a json file that declaratively creates a set of resources

215
Q

What 6 ways can you interact with ARM?

A 
Powershell
Xplat cli
Client libraries 
Visual studio
Portal template deployment 
Rest api
216
Q

What are 4 basic rules for resource groups?

A

Resources can only exist in one resource group
Resource Groups cannot be renamed
Resource Groups can have resources of many different types (services)
Resource Groups can have resources from many different regions.

217
Q

What is azure resource explorer?

A

Resouces.azure.com will show you what all your json files look like graphically, you can also export resources to generate the json

218
Q

Can a resource group be nested in another resource group?

A

N0

219
Q

When you are using arm for immutable deployments, what resource group name should you deploy to?

A

A new name each time

220
Q

Which 5 resources are minimally required to create a Windows Virtual Machine in Azure that you can connect to using Remote Desktop Protocol from any internet connected computer?

A

Storage account for VHD
Virtual Network with defined Subnet
Network Interface Card bound to Virtual Network’s Subnet
Public IP Address bound to Network Interface Card
Virtual Machine (Compute Allocation)

221
Q

What JSON property would you use in the template to collect input for creation?

A

Parameters

222
Q

What are azure storage costs based on?

A

Usage not amount of storage

223
Q

What feature of storage helps it scale?

A

Auto-partitioning based on traffic, load balanced

224
Q

All azure storage can be accessed using a REST API, What client libraries are available?

A 
.NET
Java/Android
Node.js
PHP
Ruby
Python
PowerShell
225
Q

What are the 4 different types of replication supported by Azure Storage?

A

LRS - locally redundant 3x
ZRS - zone redundant 3x across facilities or different regions
GRS - geo redundant 3x in region and 3x in a secondary region
RA-GRS - same as grs but available as read only

226
Q

What are blobs ideal for and what 2 types are there?

A

Data sharing, Big Data, Backups

Block and page

227
Q

What are tables best for?

A

Ideal for: User, device and service metadata, structured data

Schema-less entities with strong consistency
No limits on number of table rows or table size
Dynamic load balancing of table regions
Best for Key/value lookups on partition key and row key
Entity group transactions for atomic batching

228
Q

For a storage queue, what is max message size and max queue size?

A

64k and 500TB

229
Q

What are 8 actions you can perform on storage queues?

A 
Create
Measure queue length (num msgs)
Insert message
Retrieve next message
Extend message lease
Peek
Update 
Delete
230
Q

What is the file share format for an Azure file share?

A

https://[account].file.core.windows.net/

231
Q

What protocol does a Azure file share use?

A

Smb 2.1 standard protocol

232
Q

What is the max file size for an azure file share?

A

1 tb

233
Q

What is the best way to maintain control over a sas signature?

A

Use a storage access policy

234
Q

What controls what data is public in a container?

A

Public read access property

235
Q

What does a sas signature look like

A

GET https://[account].blob.core.windows.net/pictures/profile.jpg?sv=2012-02-12&st=2009-02-09&se=2009-02-10&sr=c&sp=r&si=YWJjZGVmZw%3d%3d&sig=

236
Q

In its simplest form what 6 elements make up an azure resource template?

A 
$Schema
Contentversion
Parameters
Variables
Resources
Outputs
237
Q

What size is an azure resource template limited to?

A

1MB

238
Q

What other limits apply to resource templates?

A 
256 parameters
256 variables
800 resources (including copy count)
64 output values
24,576 characters in a template expression

Subjects (6 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions