Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

AZ-104 > General > Flashcards

General Flashcards

1
Q

Export all resource in a RG as a template

A

Export-AzResourceGroup cmdlet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Create a template from a deployment in the deployment history of a RG.

A

Save-AzResourceGroupDeploymentTemplate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Deployment history of RG

A

Get-AzResourceGroupDeployment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

All operations performed during deployment

A

Get-AzResourceGroupDeploymentOperation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Register this provider namespace for Azure Log Analytics workspace.

A

Microsoft.OperationalInsights

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Register this provider namespace for Azure Policy which is used for governance and guard rails within the Azure landing zone

A

Microsoft.PolicyInsights

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Register this provider namespace forAzure Autmoation that automates different tasks within the environment (ex: patching servers)

A

Microsoft.Automation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Register this provider namespace for Azure Event Hubs, a big data streaming platform and event ingestion service that can be integrated with Azure native services.

A

Microsoft.NotificationHubs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q
  1. ArcPull
  2. ArcPush
  3. Owner
A

Authenticate with an ACR using Azure AD service principal.
What are the roles assigned to ACR to pull a non-quarantined image?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Pull.
Docker pull a non-quarantined image or pull another supported artifact, such as Helm chart, from a registry.
Requires authentication with the registry using authorized identity.

A

ArcPull

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Pull and push
Docker push an image or push another supported artifact, such as Helm chart, to a registry.
Requires authentication with the registry using authorized identity.

A

ArcPush

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Pull, push, and assign roles to others
Access resource manager
Create/delete registry
Push/pull image
Delete image data
Change policies
No - assign images

A

ACR role - Owner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Delete container images or other supported artifacts such as Helm chart, from a registry.

A

ArcDelete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Sign images, usually assigned to an automated process, which would use a service principal

A

ArcImageSigner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

True/False
KEDA checks once every 30 seconds

A

True (KEDA polling interval)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

True/False
If queue is > 0, KEDA scales the app by adding one new instance

A

True (KEDA scale up step)
Rate new instances are added: 1, 4, 8, 16, 32, …, maxReplicas

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Scale up to 30 host instances
Enhanced compute capabilities
Web apps are hosted on dedicated VMs

A

Azure App Service plan: Premium V2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Virtual instances are shared with other customers.
Multi-tenant infrastructure.
Designed for development and testing
No autoscale
1 instance

A

Azure App Service plan: Shared

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Expensive

A

Azure App Service plan: Isolated

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Scale up to 10 host instances
Storage 5 GB
Web apps are hosted on dedicated VMs

A

Azure App Service plan: Standard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Deployment template file
Gets the resource group object that will be used to deploy the template.
resourceGroup().location = location parameter

A

resourceGroup()

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Deploy scripts as continuous WebJobs
Create as linked to a web project
Supported in Basic App Service plan

A

WebJobs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

3 instances
No autoscale

A

Azure App Service plan: Basic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Can be hosted on Windows or Linux

A

.NET Core 3.0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Can be hosted on Windows

A

ASP.NET 4.8

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Networking feature
Configure access to App Services
Provide service endpoints or private endpoints
Load balancing between regional instances

A

Azure Application Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Create scalable web applications with instances across multiple regions
Support for Web Application Firewall
Load balancing across multiple regions

A

Azure Front Door

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Efficiently deliver web content to globally distributed users.
High-bandwidth physical delivery nodes placed at strategic locations across the globe.

A

Azure Content Delivery Network (CDN) endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Centralize an organization’s file shares
Cache Azure file shares to on-premises Windows file servers

A

Azure File Sync

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Can be hosted on Linux

A

PHP 7.3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Can be hosted on Linux

A

Ruby 2.6

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Adds additional fieds during the creation/update of a resource
If field exists and values are different from policy, policy acts as a deny

A

Subscription Policy - Append effect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Create a warning event in the activity log for non-compliant resources

A

Subscription Policy - Audit effect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Evaluated if the request executed by Resource Provider resturns a success status code.
Triggered if the resource does NOT exist or the resource defined by ExistenceCondition is evaluated as false

A

Subscription Policy - DeployIfNotExists effect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Disabled
Append
Deny
Audit

A

Subscription Policy - order of effect evaluation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

create new resource tag

A

New-AzTag

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q
  1. Create Azure AD group; add users to group
  2. Enable SSPR with Selected option
  3. Select Azure AD group for which you want to allow SSPR
  4. Register authentication method for SSPR
A

Steps to configure SSPR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

User Azure CLI
Ensures that the subscription logged into works with Azure Policies
Microsoft.PolicyInsights
Contributor & Owner roles

A

Azure Policy Insights

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Create/configure policies
Create support tickets
Read resources

A

Resource Policy Contributor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Prevents deletion of resources in RG.
Allows changes to resources in RG.

A

CanNotDelete lock

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Prevent addition of resources to RG

A

ReadOnly lock

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Cost savings by leveraging existing on-premises licenses.

A

Azure Hybird Benefit

43
Q

Quickly deploy/manage identical load balanced VMs

A

VM scale set

44
Q

User Principal Names
Add UPN as guest users in Azure AD tenant.
This sends an invitation to users to access services.

45
Q

Need to enable
Allow hybrid users to use SSPR

A

Password writeback

46
Q

Specify requirements for users to access Azure AD protected apps

A

Conditional access policy

47
Q

Prevents configuration drift on newly deployed or existing Azure or on-premises nodes

A

Azure Automation Desired State Configuration (DSC)

48
Q

Allows customers to define own rules for using Azure.
JSON statements

A

Custom Azure Policy template

49
Q

Remove subscription from current management group

A

Remove-AzManagementGroupSubscription

50
Q

Add subscription to a management group

A

New-AzManagementGroupSubscription

51
Q

Delete management group

A

Remove-AzManagementGroup

52
Q

Update supported parameters, such as display name or change the management group parent

A

Update-AzManagementGroup

53
Q

An App Service cannot be moved with an SSL certificate configured

A

SSL (Secure Sockets Layer)

54
Q

Do NOT move within same subscription.

A

Load Balancer

55
Q

Disable before moving VNet.

56
Q

Can be moved within same subscription.
Move all dependent resources with it (Redis cache)

57
Q

Azure AD entitlement management with Microsoft Graph PowerShell.
Retrieve catalog identifier

A

Microsoft Entra ID Governance

58
Q

Required for SSPR

A

Azure AD Premim P1

59
Q

Required for SSPR.
Secure way to send password updates back from Azure AD to onpremises AD DS

A

Azure AD Connect

60
Q

Create/manage users, groups
Manage support tickets
Monitor service health

A

User Access Administrator

61
Q

Manage user access to Azure resources but grants full access to all resources
User Access Administrator Role + Contributor Role

A

Owner role

62
Q

Create/manage all types of resources
NO - manage users’ access to resources in subscription

A

Contributor Role

63
Q

No - Azure resources
Grants permissions to manage users/groups in Azure AD tenant associated with subscription

A

User Administrator role

64
Q

Roles assigned to resources does NOT move - orphanced
The roles need to be re-created

A

Migration between subscriptions

65
Q

One of the products specified in the group contains a service plan that conflics with another service plan already assigned to the user via a different product.

A

MutuallyExclusiveViolation

66
Q

LRS to ZRS
Azure Files NFSv4.1

A

Manual migration of file storage

67
Q

LRS to GRS and RA-GRS

A

Azure portal migration of file storage

68
Q

LRS to GRS and RA-GRS

A

PowerShell migration of file storage

69
Q

LRS to ZRS
NOT Azure Files NFSv4.1

A

Live migration of file storage

70
Q
  1. Open Azure Storage Explorer
  2. Connecto to “
  3. Create blob container
  4. Upload blob to blob container
  5. Get SAS for blob and specify start/expiry time and permissions
  6. Use HTTPS to provide access of the URL to user
A

Steps to give SAS access using Azure Storage Explorer

71
Q

Use to migrate resources into Blob Storage , Queue, and Table resources using AzCopy.
User Azure AD credentials

A

Azure AD authorization

72
Q

Use for Azure files, an identity-based authorization over SMB
Hosted in Azure

A

Azure AD DS authorization

73
Q

Use for Azure files, an identity-based authorization over SMB
Hosted on-prem

A

AD DS authorization

74
Q
  1. Create storage account (New-AzStrorageAccount)
  2. Get access key (Get-AzStorageAccountKeys)
    3&4. Create file share
    • New-AzStorageContext
    • New-AzStorageShare
  3. CMDKEY on Windows Servers - to store access
  4. New-PSDrive on Windows Servers - map drive
A

Steps to mount file share in a new storage account

75
Q

Requirement for mounting Azure file sahre as on-premises SMB file share on on-premises network

A

TCP port 445 open in on-premises internet firewall

76
Q

Private connection between on-premises network and Microsoft cloud.
No need to configure on-premises firewall

A

ExpressRoute circuit

77
Q

Set Share ACL operation with SMB protocol
Additional level of control over SAS

A

Stored Access Policy for file shares

78
Q

Physical device
Import/export data from Azure
Terabytes of data

A

Azure Data Box

79
Q

Enables service endpoint (Microsoft.Storage) on the subnet for a storage account
Allows connections from storage account to subnet.

A

Set-AzVirtualNetworkSubnetConfig

80
Q

Makes the changes persistent

A

Set-AzVirtualNetwork

81
Q

Add firewall exception on the NetworkRule property in the storage account.
Allows communication from subnet to storage account

A

Add-AzStorageAccountNetworkRule

82
Q

Updates NetworkRule property to allow other Azure services, like Backup or Event Hubs, to have access to storage account

A

Update-AzStorageAccountNetworkRuleSet

83
Q

Allow connections from other Azure services

A

Update-AzStorageAccountNetworkRuleSet -Bypass AzureServices

84
Q

Modify storage account
Set a tag, update customer domain, update type of account

A

Set-AzStorageAccount

85
Q

Remove NetworkRule property from storage account

A

Remove-AzStorageAccountNetworkRuleSet

86
Q

-Bypass
-None (remove access to all Azure services)
-Metrics
-Logging

A

Parameters for Update-AzStorageAccountNetworkRuleSet

87
Q

Shared Access Signature
URL
Define time-limited read-only or read-write access to storage account resource
Configure a stored access policy
Validate data written using a SAS
Revoke SAS by deleting a stored access policy

88
Q

Azure AD, SAS

A

Blob storage authentication methods

89
Q

SAS

A

File storage authentication methods

90
Q

Port 445
Users SMB protocol on port 445
Error 67 - blocked port
- Can use domain services, either on-premises or in Azure, to support identity-based access to Azure file shares over SMB protocol

A

Azure file shares

91
Q

Port 2049

A

Network File Share (NFS) protocol

92
Q

Error 53
Suuport Azure file shares

A

New Technology LAN Manager version 1 (NTLMv2)

93
Q

2 options:
1. ad-hoc SAS
2. stored access policy

A

SAS options

94
Q

Specify start & expiration time, permissions to URI

A

ad-hoc SAS

96
Q
  1. Put Blob
  2. Put Block List
  3. Copy Blob
  4. Set Blob Metadata
A

Blob versioning

97
Q

Create new block, page, or append blob
Update existing block blob (overwrite metadata)

A

Blob versioning - Put Blob

98
Q

Writes a blob by specifying the list of block IDs that make up the blobl.
Update a blob by uploading only those blocks that have changed and committing the new/existing blocks together

A

Blob versioning - Put Block List

99
Q

Copies a blob to a destination within the storage account

A

Blob versioning - Copy Blob

100
Q

Sets user-defined metadata for the specified blob as one or more name-value pairs

A

Blob versioning - Set Blob Metadata

101
Q

Zone-redundant storage
Copies data synchronously across 3 AZs in the primary region to provide high availability
Protects against failure at physical location bud does not protect against region-wide failures.

102
Q

Locally Redundant Storage
Copie data synchronously 3x within a single physical location

103
Q

GRS - protect against reginal outages
GZRS - maximize availability and durability of

AZ-104 (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions