Governance And operations Flashcards
T/F:
An initiative is limited to being assigned to resource groups or subscriptions only
False
T/F:
An initiative can only contain policies that are located in the same subscription
True
You need to define a set of policies to help ensure compliance for resources contained in a resource group.
What is the most appropriate governance methodology?
Initiative
You need to compare the cost of running an application workload in Azure versus on-prem.
What should you do to ensure that you can use the Azure TCO calculator to complete this task?
Define the following workloads:
Server
Database
Storage
Networking
T/F:
All Azure resources support tags
False
T/F:
Tags are name/value pairs
True
T/F:
Tags applied to a resource group are inherited by its resources.
False
What does Microsoft recommend users implement to organize Azure Cost Management and Billing Cost reports
Tags
Your company is considering moving its on-prem infrastructure to Azure. Before doing so, you want to compare cost savings, if any
What is the most appropriate cost savings estimation tool
Total Cost of Ownership calculator (TCO)
When does Azure monitor begin collecting data?
As soon as a resource is added to a new Azure subscription
A coworker informs you of a planned Azure Maintenance window. You attempt to verify this information but are still uncertain whether the maintenance will impact services you use.
What should you do to determine how this maintenance will impact services you use?
Verify any planned maintenance via the Service Health Dashboard
You want to enable developers to improve app performance and usability, which monitoring feature should you use?
Application Insights
You want to receive an email whenever the number of requests to a web app exceeds 10,000 within an hour
What monitoring feature should you use?
Alerts
How would you view the number of VMs that are currently down?
Resource Health
What resource or feature should you use if you want to control the users who are allowed to create virtual networks (VNets)
RBAC (role based access controls)
You want to review security recommendations related to your deployed resources, what feature is best for this scenario?
Azure Advisor
You want to prevent virtual machines from being deployed in a subscription, what tool is the best solution?
Azure Policy
T/F:
CapEx costs are fixed
True
T/F: using CapEx for infrastructure spending is a good idea when the demand fluctuates or is unknown
False
T/F: The pay-as-you-go consumption model qualifies as an OpEx
True
Where can you find information about planned maintenance and advisories such as deprecated offerings?
Azure Service Health
What feature allows you to assign permissions to users so they can create resources in Azure?
RBAC (Role-based access control)
What are two valid destinations for platform logs and metrics collected by azure monitor?
Azure Log Analytics Workspace
An Azure Storage Account
What feature of Azure Monitor allows for visual analyzation of telemetry data
Application Insights
What Cloud Adoption Framework methodology defines the business justification and expected outcomes of the adoption
Strategy
What CAF methodology allows individuals to align actionable adoption plans with business outcomes
Plan
What stage in the CAF methodology signifies it’s time to prepare the cloud environment for the planned changes
Ready
Which Methodoloy in the CAF governs creation of new cloud native or hybrid solutions
Innovate
Which Azure Portal UI element is represented by a collection of customizable tiles that are displayed in the portal?
Dashboard
Which portal element is represented by a panel that slides out in a navigations sequence?
Blade
Which UI element is a service that provides recommendations on high availability
Azure Advisor
T/F: when a blueprint is updated and the updated version is published, any assignments of the blue print are updated automatically
False
T/F: When a Blueprint is unassigned, all of the resources assigned by the blueprint remain in place, but blueprint locking is removed
True
T/F: when you delete a core blueprint, any assigned versions of the blueprint remain in place
True
T/F: you can use Azure Command-line interface with Linux VMs
True
T/F: you can use Azure PowerShell with Linux VMs
True
T/F: you can use Azure portal to manage Linux VMs
False
You deploy a new Linux Virtual Machine and then manually adjust its configurations in Azure portal to meet the requirements of your dev environment.
What are two ways you can capture the changes made to use it as a template for deployment of test and prod VMs
Export ARM (Azure Resource Manager) template from a resource or resource group
You need to log in to Azure using cmdlet (Connect-AzAccount) from your laptop without manually opening a web browser what tool is most appropriate?
Azure PowerShell
What Az management tool is most appropriate for logging into Azure from your laptop without manually opening a web browser using script (az login)
Azure CLI
You want to run the following cmdlet in a scripting environment inside the browser:
(New-AzVM) what management tool is most appropriate
Azure Cloud Shell
T/F:
Azure PowerShell can be used to create scripts to automate Azure Management tasks
False
T/F: Azure PowerShell virtual machine management is limited to Windos VMs only
False
Your company has a new policy to restrict administrative access to resources at the resource group and resource scopes in a detailed, granular way. Access is granted to various groups and individual users.
What should you use to implement the new policy?
RBAC
Your company uses Azure Blueprints to assist with its migration to Azure. User1 should be able to assign published blueprints.
You need to add User1 to the role-based access control (RBAC) role necessary to provide this permission, principle of least privlege
Blueprint Operator
T/F: azure Advisor makes shutdown recommendations based on CPU and memory utilization over the last seven days.
False
You can use Azure Advisor to reduce costs by resizing underutilized virtual machines
True
T/F:
Tags can aid in cost management for your subscriptions and each tags consists of a name, location and value
False
T/F:
Azure Locks can be applied in the context of specific users and roles.
False
T/F:
When multiple locks are applied at different scopes, the most restrictive, inherited lock applies
True
T/F:
A lock applies to all of the resources container in a scope and any new resources added to the scope
True
T/F:
RBAC roles take precedence over locks
False
What is the Azure Pricing Calculator used for?
Estimating monthly cost associated with using specific Azure Resources
Which Azure Service can use auto scale to add or remove resources as appropriate to minimize costs and ensure optimum performance levels
Azure Monitor
Which Azure service is used to send email to an administrator when a VM is about to exceed its usage quota for the month
Azure Monitor Alerts
Which Azure Management tool provides a graphic interface for deploying, managing and monitoring Azure resources?
Azure Portal
What resource is require to use Azure Cloud Shell
Storage Account
What solution should you use to ensure that your company is meeting its internal compliance goals and that Azure resources are compliant with company standards.
Will need to include ongoing evaluation for compliance and the identification of non-complaints resources.
Azure Policy
You want to know how many times your web app has been unavailable during the past month.
What monitoring feature is best for this purpose?
Health History
What monitoring feature is recommended for teams who want to receive a text message when Azure Maintenance is planned
Health Alerts
