Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Microsoft Azure Administrator > Implement and manage storage in Azure > Flashcards

Implement and manage storage in Azure Flashcards

1
Q

What is Microsoft’s Cloud Storage solution?

A

Azure Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What types of objects can be stored in Azure storage?

A

Files, messages, tables, and other types of information.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the 3 data structures that Azure Storage supports?

A

Structured data, unstructured data, and virtual machine data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Define ‘Virtual machine data’

A

Disks and files.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Describe how a VM uses a virtual disk

A

Persistent block storage for Azure IaaS virtual machines; Store data like database files, website static content, or custom application code.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Describe how Virtual machine data files are managed

A

Fully managed file shares in the cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Describe the format of ‘Unstructured data’

A

The format of unstructured data is referred to as nonrelational.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What two Azure Storage services are used to store unstructured data?

A

Azure Blob Storage and Azure Data Lake Storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Describe ‘Structured data’

A

Stored in a relational format; Often contained in a database table with rows, columns, and keys.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the 3 Azure storage services that store structured data?

A

Azure Table Storage, Azure Cosmos DB, and Azure SQL Database.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Define ‘Azure Cosmos DB’

A

Globally distributed database service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Define ‘Azure SQL Database’

A

Fully managed database-as-a-service built on SQL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the two tiers of general purpose Azure Storage?

A

Standard and Premium.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Describe the standard tier of general purpose azure storage

A

Data is stored on HDDs; A standard storage account provides the lowest cost per GB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Describe the premium tier azure storage

A

Data is stored on SSDs; Offers consistent low-latency performance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How can resiliency be ensured with Azure storage?

A

Configuring data replication across datacenters or geographical regions for protection.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Does Azure storage encrypt all data?

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the four data services offered by Azure Storage?

A
  1. Azure Blob Storage (containers)
  2. Azure Files
  3. Azure Queue Storage
  4. Azure Table Storage
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q
A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Describe the purpose of ‘Azure Blob Storage (containers)’

A

For storing large amounts of unstructured/nonrelational data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is blob storage ideal for?

A

Serving content to a web app; Storing data for backup/analysis; Videos/Text/Images/Installers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How can Azure blob storage be accessed?

A

Via HTTP(s)/Azure Shell; Shared access signature (SAS); API; Shared key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Describe Azure Files and how it can be accessed

A

Enables highly available network file shares; Shares can be accessed via SMB and NFS protocol.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is Azure Files ideal for?

A

Applications (containers) and their data; Storing config files accessed by VMs; Logs; Migrating data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Describe the purpose of ‘Azure Queue Storage’

A

Used to store and retrieve messages.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What typeof data is stored with ‘Azure Table Storage’?

A

Stores non-relational structured data (NoSQL).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

List the four Azure storage account options/SKUs

A
  1. Standard/premium general-purpose v2
  2. Premium block blobs
  3. Premium file shares
  4. Premium page blobs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What types of data can be stored with the ‘General-purpose v2’ Azure storage account type/SKU

A

Can be used for most scenarios; blobs, file shares, queues, tables, and disks (page blobs).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What types of data is stored with ‘Premium block blobs’ Azure storage account type/SKU?

A

Block blobs and append blobs only; Recommended for applications with high transaction rates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Describe the ‘Premium file shares’ Azure storage account type

A

For file shares only; Recommended for enterprise or high-performance scale applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What types of data can be stored with ‘Premium page blobs’ Azure storage account type/SKU?

A

Page blobs only; Operating systems, data disks for virtual machines, and databases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What are the four replication services offered by Azure Storage?

A
  1. Locally redundant storage (LRS)
  2. Zone redundant storage (ZRS)
  3. Geo-redundant storage (GRS)
  4. Geo-zone-redundant storage (GZRS)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Describe ‘Locally redundant storage (LRS)’

A

Replicates data within the same datacenter; Lowest-cost replication option and offers the least durability compared to others.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are best use cases for Locally redundant storage (LRS)?

A

Data replication is restricted within a country/region due to data governance requirements; Storing frequently changed data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Describe ‘Zone redundant storage (ZRS)’

A

Synchronously replicates your data across three availability zones in a single region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Describe ‘Geo-redundant storage (GRS)’

A

Replicates your data to a secondary region to offer redundancy during a region outage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is the guaranteed SLA of Geo-redundant storage (GRS)?

A

99.99999999999999% (16 9’s) durability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What are the two forms of Geo-redundant storage (GRS)?

A
  1. GRS
  2. Read-access geo-redundant storage (RA-GRS)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

How does Geo-redundant storage (GRS) function in the event of failover?

A

Data is available to be read only if Microsoft initiates a failover from the primary to secondary region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

How does Read-access geo-redundant storage storage (RA-GRS) function in the event of failover?

A

Replicates data to another data center in a secondary region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Can data be accessed without a triggered failover from Microsoft with user Read-access geo-redundant storage storage (RA-GRS)?

A

Yes; Can read from the secondary region regardless of whether Microsoft initiates a failover from the primary to the secondary.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

How does Geo-redundant storage (GRS) and Read-access geo-redundant storage storage (RA-GRS) replicate data between regions?

A

Data is first replicated with LRS; Then replicated asynchronously to the secondary region by using GRS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

With Geo-redundant storage (GRS) and Read-access geo-redundant storage storage (RA-GRS), how does the secondary region replicate data?

A

The secondary region provides LRS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Describe ‘Geo-zone-redundant storage (GZRS)’

A

Data is replicated across three Azure availability zones in the primary region, and also replicated to a secondary geographic region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What is the guaranteed SLA of Geo-zone-redundant storage (GZRS)?

A

99.99999999999999% (16 9’s) durability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What two Azure storage replication services will provide read-only access during region wide outage?

A
  1. RA-GRS
  2. RA-GZRS
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What four Azure storage replication services provide data access in a region wide outage?

A
  1. RA-GRS
  2. RA-GZRS
  3. GRS
  4. GZRS
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What Azure storage replication service will not provide data access if an entire data center becomes unavailable?

A

LRS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What two components does the name of an Azure Storage account consist of?

A
  1. Storage account name
  2. Service domain
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What is the default endpoint name of a blob (container) service account?

A

StorageAccountName.blob.core.windows.net

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What is the default endpoint name of a table service account?

A

StorageAccountName.table.core.windows.net

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What is the default endpoint name of a queue service account?

A

StorageAccountName.queue.core.windows.net

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What is the default endpoint name of a file service account?

A

StorageAccountName.file.core.windows.net

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

How is data in a storage account accessed by URL?

A

By appending the objects location in the endpoint URL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

How can storage accounts leverage custom URL domain?

A

Implement an Azure Content Delivery Network (CDN) to access blobs by using custom domains over HTTPS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What are the two ways of configuring a custom domain for a subdomain to an Azure storage account?

A
  1. Direct mapping
  2. Intermediary domain mapping
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Describe how subdomain ‘Direct mapping’ is configured

A

Create a CNAME record that points from the subdomain to the Azure storage account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

Describe subdomain ‘Intermediary domain mapping’

A

Adds a keyword to a subdomain CNAME that’s already in use within Azure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Describe how Intermediary domain mapping is configured

A

Prepend the keyword ‘asverify’ to the subdomain in Azure DNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Where are service endpoints configured for a storage account?

A

In the storage account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What is the purpose for configuring a service endpoint for a storage account?

A

Restrict access to your storage account from specific subnets on virtual networks or public IPs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Where must the storage account and virtual network be to configure a service endpoint for a storage account?

A

Subnets and virtual networks must exist in the same Azure region or region pair as the storage account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Define a ‘Blob’

A

Blob stands for Binary Large Object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Where/how is a blob stored?

A

Stored/Uploaded in a container resource to group a set of blobs; A blob can’t exist by itself in Blob Storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

What is the maximum amount of blobs that can be stored in a container?

A

Unlimited.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

What is the maximum amount of containers that can be stored in an Azure storage account?

A

Unlimited.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Can there be duplicate names for a container in a single Azure storage account?

A

No; The name must be unique within the Azure storage account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

Describe an ‘access tier’ and its purpose

A

Each access tier for blob storage is optimized to support a particular pattern of data usage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

What are the 4 blob storage access tiers?

A
  1. Hot
  2. Cool
  3. Cold
  4. Archive
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Describe the ‘Hot’ blob storage access tier

A

Optimized for frequent reads and writes of objects in the Azure storage account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

What is the best use case for the hot access tier?

A

For data that is actively being processed.

71
Q

Describe the overall cost of the hot access tier

A

Has the lowest access costs, but higher storage costs than the Cool and Archive tiers.

72
Q

What tier are new Azure storage account placed in by default?

A

Hot.

73
Q

Describe the ‘Cool’ blob storage access tier

A

Optimized for storing large amounts of data that’s infrequently accessed.

74
Q

What is the best use case for the cool access tier?

A

For data that remains untouched for at least 30 days; Hot-term backup and disaster recovery datasets and older media content.

75
Q

Describe the overall cost of the cool access tier

A

Most cost effective although it has the 2nd highest access costs.

76
Q

Describe the ‘Cold’ blob storage access tier

A

This tier is intended for larger amounts of data that can remain un-accessed for at least 90 days.

77
Q

How long must data in the ‘Archive’ blob storage access tier remain untouched?

A

Data must remain in the Archive tier for at least 180 days or be subject to an early deletion charge.

78
Q

What is the best use case for the archive access tier?

A

Secondary backups, original raw data, and legally required compliance information.

79
Q

What access tier is the most cost-effective for storing data?

A

Archive

80
Q

What access tier is the least cost-effective for accessing data?

A

Archive

81
Q

What access tier offers the highest SLA reliability?

A

Hot access tier

82
Q

What Blob storage mechanism can be used to help manage data lifecycle?

A

Lifecycle management rules to determine what tier data should be placed in, and expiration for the data.

83
Q

What types of storage accounts can use lifecycle management?

A

GPv2 and Blob Storage accounts.

84
Q

Can lifecycle management be applied to a container?

A

Yes.

85
Q

How can data be automatically moved to a different access tier over its lifecycle?

A

By creating a lifecycle management rule that can move the data to a different tier based on when it what created or last modified.

86
Q

Describe ‘blob object replication’

A

Object replication copies blobs in a container asynchronously according to policy rules that you configure.

87
Q

List the contents that are copied from the source to the destination during blob object replication

A
  • The blob contents
  • The blob metadata and properties
  • Any versions of data associated with the blob
88
Q

What must be enabled on source and destination blob storage accounts/containers to perform blob object replication?

A

blob versioning.

89
Q

What type of data is not supported in blob object replication?

A

VM Snapshots.

90
Q

What access tiers support blob object replication

A

Hot, Cool, or Cold tier.

91
Q

Can source and destination blob storage accounts be in different access tiers when performing blob object replication?

A

Yes.

92
Q

What does a blob object replication policy consist of?

A

One or more rules that specify a source container and a destination container as well as the blobs in the source container to replicate.

93
Q

List the 3 types of Azure Storage Blobs

A
  1. Block blobs
  2. Append blobs
  3. Page blobs
94
Q

Describe a ‘Block blob’

A

Ideal for storing text and binary data in the cloud, like files, images, and videos.

95
Q

Describe an ‘Append blob’

A

Useful for logging scenarios, where the amount of data can increase as the logging operation continues.

96
Q

What is the max size of a ‘Page blob’?

A

Can be up to 8TB in size

97
Q

What is the default blob type for a new blob?

A

Block blob.

98
Q

Define ‘AzCopy’

A

Cloud shell command that copies data to/from blob storage/containers/accounts.

99
Q

Describe ‘Azure Data Box Disk ‘

A

A service for transferring large amounts of on-premises data to Blob Storage using Microsoft provided SSDs.

100
Q

Describe ‘Azure Import/Export’

A

Export/import data by sending Microsoft hard drives with data and they will send them back.

101
Q

Describe ‘Blob versioning’

A

Automatically maintain previous versions of an object; Access earlier versions of a blob to recover your data if it’s modified or deleted.

102
Q

Between what two access tiers will data automatically change when it accessed/inaccessed?

A

Hot tier to cool tier.

103
Q

What access control mechanisms are used to secure Azure Storage?

A

Microsoft Entra ID and role-based access control (RBAC)

104
Q

How can data be secure in transit when using Azure storage?

A

By using Client-Side Encryption, HTTPS, or SMB 3.0.

105
Q

How does Azure storage leverage zero trust?

A

Every request made against a secured resource must be authorized.

106
Q

Describe a ‘shared access signature (SAS)’

A

A uniform resource identifier (URI) that grants restricted access rights to Azure Storage resources.

107
Q

What is the purpose of implementing a shared access signature (SAS)?

A

A secure way to share storage resources with unauthorized users without compromising your account keys.

108
Q

Can a shared access signature (SAS) be time based?

A

Yes; Specify the time interval for which a SAS is valid.

109
Q

What are the two types of shared access signature (SAS)?

A
  1. Account-level
  2. Service-level
110
Q

Describe an ‘Account-level’ shared access signature (SAS)

A

SAS delegates access to resources in one or more Azure Storage services.

111
Q

Describe an ‘Service-level’ shared access signature (SAS)

A

Service-level SAS delegates access to a resource in only one Azure Storage service.

112
Q

Can shared access signature (SAS) specify a range of IPs to accept shared access signature (SAS) from?

A

Yes.

113
Q

What does a shared access signature (SAS) uniform resource identifier (URI) consist of?

A

The Azure Storage resource URI and the SAS token.

114
Q

How is data encrypted/decrypted in Azure storage?

A

Encryption and decryption processes happen automatically.

115
Q

How is data in Azure storage encrypted?

A

All data written to Azure Storage is encrypted through AES-265 encryption.

116
Q

How can encryption keys be managed in Azure Storage?

A

Microsoft managed or customer (self) managed.

117
Q

What service is used to manage and generate encryption keys?

A

Azure key vault.

118
Q

What is the security risk of shared access signature (SAS)?

A

If a SAS is compromised, it can be used by anyone who obtains it, including a malicious user.

119
Q

What is best practice for securing shared access signature (SAS)?

A

Always use HTTPS for creation and distribution.

120
Q

Define a ‘stored access policy’

A

Revoke permissions without having to regenerate the Azure storage account keys by setting key expiration date.

121
Q

How can clients ensure access to keys if the service providing shared access signature (SAS) is unavailable?

A

Require clients automatically renew the SAS.

122
Q

What is best practice for configuring a shared access signature (SAS) start time?

A

Set the start time to at least 15 minutes in the past. Or, don’t set a specific start time, which causes the SAS to be valid immediately

123
Q

How can the amount of data uploaded/downloaded using shared access signature (SAS) be restricted?

A

Near-term expiration times can limit the amount of data that can be written to a blob by limiting the time available to upload to it.

124
Q

How does implementing a shared access signature (SAS) effect cost?

A

There are additional charges for upload/download ingress/egress.

125
Q

What solution is the easiest way to implement secure storage for a company’s media files?

A

Create stored access policies for each container to enable revocation of access or change of duration.

126
Q

How/Where are files accessed using Azure Files stored?

A

Allows you to cache several Azure Files shares on an on-premises Windows Server or cloud virtual machine.

127
Q

How do VMs or other cloud services access data in Azure Files?

A

By mounting an Azure File share.

128
Q

How many VMs or services can mount/access an Azure File share?

A

Unlimited simultaneous connections to on-prem or cloud.

129
Q

What are the two supported protocols for mounting an Azure file share?

A

NFS and SMB.

130
Q

Can the same file Azure file share use SMB and NFS at the same time?

A

No; One or the other.

131
Q

What are the two types of Azure file shares?

A
  1. premium
  2. Standard
132
Q

Describe a premium azure file share

A

Stores data on SSDs; can be used to APIs; can’t go back to standard tier.

133
Q

Describe a standard azure file share

A

Stores data on HDDs; Can only use SMB and NFS.

134
Q

What is a networking consideration when deploring an Azure SMB file share?

A

Open port 445.

135
Q

What is the function of an Azure file snapshot?

A

Capture a point-in-time, read-only copy of your data.

136
Q

Are snapshots incremental?

A

Yes.

137
Q

Can a snapshot of an individual snapshot be taken?

A

Yes.

138
Q

Define ‘soft delete for Server Message Block (SMB) file shares’

A

Lets you recover deleted files and file shares or ‘softly’ delete files.

139
Q

How are files softly deleted with soft delete for Azure files?

A

A retention period is set and defines the amount of time that soft deleted files are stored and available for recovery.

140
Q

What is the retention period range Azure allows for soft delete?

A

Between 1 and 365 days.

141
Q

How is soft delete enabled?

A

Enabled at the storage account level; can be enabled on either new or existing file shares.

142
Q

Define ‘Azure Storage Explorer’

A

Standalone GUI application for accessing multiple storage accounts and subscriptions, to manage Storage content.

143
Q

What are the requirements to implement Azure Storage explorer?

A

Requires Azure Resource Manager and Role-based access control along with Azure AD (Entra ID).

144
Q

Can an external storage account be connect to Azure Storage explorer?

A

Yes.

145
Q

Define a storage access key

A

Access keys provide access to the entire storage account.

146
Q

How many access/account keys are provided to the tenant when a storage account is created?

A

2

147
Q

Describe ‘Azure File Sync’

A

Enables you to cache several Azure Files shares on an on-premises Windows Server or cloud virtual machine.

148
Q

Define ‘Cloud tiering’

A

Optional feature of Azure File Sync; Frequently accessed files are cached locally on the server while all other files are tiered to Azure Files based on policy settings.

149
Q

How is a file stored with Azure File Sync cloud tiering?

A

Initially stored on-prem, once inactivity policy is reached, File Sync replaces the file with a pointer URL (reparse point) to the file in Azure files.

150
Q

How is a file accessed with cloud tiering?

A

Azure File Sync recalls the file data from Azure Files.

151
Q

How are cloud tiered files represented?

A

Greyed icons with an offline O file attribute.

152
Q

What are the best scenarios for Azure File Sync?

A

Migration; Support for Branch offices; Backup/recovery.

153
Q

Define a ‘storage account’

A

An Azure resource; A Container that groups a set of Azure Storage services together.

154
Q

What Azure storage services can be stored in a storage account?

A

Azure Blobs, Azure Files, Azure Queues, and Azure Tables.

155
Q

What is the benefit of combining multiple azure storage services under a single storage account or resouce group?

A

Enables you to manage them as a group.

156
Q

What is the affect of deleting a storage account?

A

Deletes all of the data stored inside it.

157
Q

What Azure data services can’t be included in a storage account, and are managed independently by Azure?

A

Azure SQL and Azure Cosmos DB.

158
Q

What are the two deployment models Azure offers for a storage acount?

A

Resource Manager and Classic.

159
Q

What is the recommended deployment model for a storage account?

A

Resource manager.

160
Q

When choosing a name for a storage account, what must be required?

A

The name must be globally unique.

161
Q

What are two ways to limit public access to blob storage?

A
  1. Via the Storage Account
  2. Via the Container
162
Q

What parameter is configured at the storage account level to allow public access?

A

Set the AllowBlobPublicAccess property to true or false.

163
Q

What are the two ways public access is granted at the storage account level?

A
  1. Public read access for blobs
  2. public read access for a container and its blobs
164
Q

In order to allow public access to blob storage, what two things must be configred?

A
  1. Storage account set to public access
  2. Container settings set to public access.
165
Q

What are the 3 types of Shared access signatures (SASs)?

A
  1. User delegation SAS
  2. Service SAS
  3. Account SAS
166
Q

How is ‘User delegation shared access signature (SAS)’ secured?

A

Secured with Microsoft Entra credentials; Can only be used for blob storage.

167
Q

How is a ‘Service shared access signature (SAS)’ secured?

A

secured using a storage account key to only once of four Azure Storage services.

168
Q

How is a ‘Account shared access signature (SAS)’ secured?

A

Secured with a storage account key; Can also control access to service-level operations.

169
Q

How many shared access signatures (SASs) can a single stored access policy be associated with?

A

Up to five active SASs.

170
Q

How is a shared access signature (SAS) encrypted?

A

The signature is signed with your storage account key when you create a service or account shared access signature or with a user delegation shared access signature in Entra ID.

171
Q

What is the most secure implementation of shared access signature (SAS)?

A

User delegation via Entra ID.

172
Q

What 4 Azure storage resources can a stored access policy be applied to?

A
  1. Blob containers
  2. File shares
  3. Queues
  4. Tables
173
Q

What Azure storage resources/services can be accesses by Azure Storage explorer?

A

Blobs; Tables; Queues; Azure Files; Azure Data Lake.

174
Q

What is the purpose of a local emulator?

A

Emulates storage resources to a local computer to reduce cost.

175
Q

Describe the purpose/function of Azure Data Lake Storage

A

Used for storing and analyzing large data sets.

Microsoft Azure Administrator (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions