Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ-900 > Exam Learnings > Flashcards

Exam Learnings Flashcards

1
Q

What does an Azure Management Group do?

A

Allows your to apply policies with flexible hierarchies to multiple subscriptions
DOES NOT: Manage RBAC - it is for managing subscriptions above the normal subscription level.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which cloud attribute is defined by knowing your application will perform as expected regardless of customer demand?

A

Predictability
Knowing your application will perform at a consistent level regardless of the load. This is achieved through a combination of autoscaling, high availability, and load balancing. It also describes transparency in cost.
NOT: Having to do with resource failures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the capabilities of Azure Arc?

A

Enable running serverless (ex. Azure Functions) in a containerized form on on-premises servers.
Protect Amazon E2C instances with Microsoft Defender
Apply RBAC to non-Azure servers
CANNOT: Privately connect on-premises networks to Azure managed services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Azure data box?

A

Used for transferring a lot of data into or out of Azure Storage with limited network bandwidth
Too much data over the internet
You get a physical box and ship it to Azure
Encrypted and Rugged
Used for bulk data migration, security. Disaster recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Azure Migrate?

A

Moving non-Azure resources into Azure
Can be servers, apps, databases
One of its features is the ability to discover dependencies of resources being migrated to Azure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is AzCopy?

A

Command-line Utility
Transfer blob and Azure files
Useful for scripting data transfer - not continuous transfer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Storage Explorer?

A

GUI method - downloaded application for Blob
Can more ALL storage account formats

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is Azure File Sync?

A

Specifically with Azure files
Will automatically sync with on-prem file servers
Use to backup local file server
Helps with transition to files being only on Azure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How do you ensure a server is separately physically from your other servers?

A

Have it in a separate region with a separate Vnet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which Azure tool allows you to view which user turned off a specific virtual machine during the last 14 days?

A

Azure Activity Log - it is a logging service that provides insight into subscription-level events that have occurred in Azure. This includes a range of data, from Azure Resource Manager operational data to updates on Service Health events. Events such as starting and stopping of virtual machines can be found here.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the preferred method to run Azure serverless services, like Logic Apps, on your on-premises servers?

A

Enable Azure Arc on your on-premises servers.
Azure Arc enables Azure serverless services (like Logic Apps) to run on non-Azure servers as a containerized workload.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What would you recommend to easily manage multiple subscriptions from a single source?

A

Management groups
Management groups are an Azure resource management scope that sit above individual subscriptions. They are in fact a grouping, or collection of multiple subscriptions. Permissions, policies, and compliance settings applied to a management group are automatically inherited by all subscriptions inside of that group.
NOT: Use resource groups to manage multiple subscriptions
Resource groups are a management container inside of subscriptions, where groups of different Azure services are deployed. For this scenario, we want to use management groups, which are a higher-level, logical grouping of subscriptions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What Cloud service model is Azure Function Apps?

A

Severless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How can you combine Azure subscriptions?

A

You cannot in the Azure Portal
You must contact Microsoft Azure Support

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Name 2 command-line tools that can be used to interact with Azure resources using the Azure CLI.

A

Bash
Powershell

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the concept in which you layer multiple stages of security such as physical security, network security, etc., to create a robust defense against cybersecurity threats?

A

Defense in Depth - Defense in depth is the concept in which by layering different security measures, protection against security threats is greatly increased.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Does vertical scaling require downtime or can it be done automatically?

A

Requires downtime

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What 2 components are required for Azure Monitor alerts?

A

Action Group - After an alert is triggered via an alert rule, the action group designates who is informed of the triggered alert.
Alert Rule - The alert rule provides the conditions that must be met before triggering an alert.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is Azure Logic Apps?

A

Azure Logic Apps provides no-code solutions for connecting and automating workflows between different services and applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What operating systems work on CLI and Powershell?

A

Windows
MacOS
Linux

21
Q

What is Azure File Sync?

A

Azure File Sync automatically synchronizes on-premises file servers with Azure Files.

22
Q

What is Application Insights?

A

Provides insights such as customer behavior, performance bottlenecks, and errors to web applications as well as website performance monitoring.

23
Q

What is Manageability for the Cloud?

A

Manageability has two aspects: 1. How you create and manage resources, which includes autoscaling, template-based deployments, and monitoring/alerts. 2. How you interact with your cloud environments, including via a web portal, command line, and programmatic APIs.

24
Q

What solution exists to migrate the functionality of your existing on-premises file server to Azure using a Server Message Block (SMB) shares for file storage and management?

A

Azure Files uses SMB shares within a storage account to act as a cloud-based network file server.

25
Q

What is a self managed Active Directory?

A

You are in charge of configuring and maintaining a Windows server acting as a domain controller. Self-managed AD n an Azure VM can use an existing domain namespace.

26
Q

What is the primary difference between Private and Service endpoints?

A

Private - Connectivity to non-Azure resources
Private Endpoints allow private access from connected non-Azure locations, therefore allowing full removal of public PaaS access and still allowing on-premises connectivity.
DOES NOT require Azure Arc
Service - Service Endpoints only work with Azure Virtual Networks at a subnet-level scope

27
Q

Review Storage Account options

A

Premium page blobs support the fastest possible performance for page blob storage types (e.g., IaaS disks)

28
Q

What fault tolerance options are best if you want to ensure your application will remain up and running during a hardware failure or planned OS update?

A

Availability Set - An Availability set consists of 2 or more virtual machines in the same physical location within an Azure datacenter. This configuration ensures that only a subset of the virtual machines in an availability set will be affected in the event of hardware failure, OS update, or a complete data center outage; whereas, availability zones protect applications from complete Azure datacenter failures, which was not a requirement in this scenario.

29
Q

What is Azure Privileged Identity Management?

A

A service in Azure Active Directory that allows you to manage, control, and monitor access to important resources in your organization.

30
Q

What is the best storage option for keeping costs low, for general storage types, and an acceptable level of performance?

A

General-Purpose V2

31
Q

What is the query language used for Log Analytics?

A

KQL

32
Q

What is the purpose of the Service Trust Portal?

A

Provides customers with Azure compliance documentation.

33
Q

Azure Express Route?

A

If you need data on prem and on cloud
Needs to be highly available
Periodically migrated
Not over public internet, over Azure backbone
Higher security and more reliable

34
Q

What is Azure Resource Manager vs. ARM templates?

A

Azure Resource Manager - manages and controls all interactions with Azure
ARM Template - infrastructure-as-code for automated deployments, which interact with Azure Resource Manager

35
Q

When would you authenticate using Azure AD credentials using single sign on?

A

When newer authentication for the app is supported (ex. OAuth 2.0)

36
Q

What is a preferred method for inviting external users as a collaborator in the Azure AD environment?

A

Invite their existing account as an external guest user

37
Q

What is Azure AD Connect?

A

Just syncs your on prem AD with Azure AD

38
Q

What is AD DS?

A

Domain controller - a server running Active Directory Domain Services. It processes requests for authentication and validation of users on a network.
You need it for more control over your hierarchy
Azure AD - great for cloud, but limited to just usernames and passwords

39
Q

What two options could you do if you have an app that you need to convert to the cloud, and the authentication method is out-dated? You already have an existing AD DS environment. What option can you not use?

A

Option 1: Azure AD Connect to sync your on Prem AD with Azure AD
Option 2: Configure an Azure DM as the domain controller and configure the app to authenticate with your VM hosted AD server. You can integrate your new VM with your existing AD Ds.
CANNOT: Use Azure AD DS - this cannot integrate with an existing AD DS

40
Q

How do you invite external guests to Azure?

A

Create a separate organization for external users - can’t use primary accounts so must juggle two.
Invite guest user to Azure tenant
Invite account types with the help of identity providers (Microsoft, Google, Facebook)
Assign permissions for guest accounts
Assign guest user to a specific applications
Conditional Access Policies - to use MFA

41
Q

What CANT Azure VMS be moved between?

A

Availability Sets

42
Q

What are the 2 main benefits of Government on Azure Cloud?

A

Screened personnel
Dedicated regions for data isolation
Dedicated hosts - but not unique to Government for Cloud

43
Q

What is high availability vs. reliability for the cloud?

A

Reliability is ensuring services and applications are available in the event of a failure, for large scale disasters
High availability is making sure IT disruptions are minimized as much as possible. Carried out by using clusters of identical servers and automatically replacing failed servers.

44
Q

Are you still charged when a Virtual Machine is deleted?

A

Yes, its managed disk remains in the Azure portal and can be used to create a new virtual machine
Until the disk is removed you’ll incur charges whether it is in use or not.

45
Q

What is Locally Redundant Storage?

A

Copies your data 3 times within a single zone - least expensive - not recommended for high availability apps (ONE ZONE)
Pro - protects against datacenter failure in the primary zone of the primary region
Drawback - does not protect against regional failure or zone failure

46
Q

What is Zone Redundant Storage?

A

Copies your data synchronously across 3 Azure availability zones (3 ZONES) in the primary region
Pro - protects against zone failure in the primary region
Drawback - does not protect against region failure

47
Q

What is Geo-Redundant Storage?

A

3 copies in the primary region in a single zone, and one copy in the second Region pair. (2 Regions, 3 COPIES in the Primary Region, 3 COPIES in SECOND REGION)
6 copies total
Pro - protects again primary region failure
Drawback - no protection for zone failure in the primary region

48
Q

What is Geo-Zone-Redundant Storage?

A

3 copies in the primary region across 3 zones, and 3 copies in the second Region pair. (2 Regions, 3 COPIES in SECOND REGION)
Pro - protects against primary region failure and primary zone - region failure

AZ-900 (13 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions