Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Azure Intro AZ-900 > Intro > Flashcards

Intro Flashcards

1
Q

Name all the Cloud Key Concepts

A 
High Availability
Scalability
Elasticity
Agility
Fault Tolerance
Disaster Recovery
Global Reach
Customer Latency Capabilities
Predictive Cost Considerations
Security
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Capital Expenditure (CapEx)

A

Spend up front and deduct expense from tax bill. “On Promise”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Operational Expenditure (OpEx)

A

Spend on services or products as needed and deduct expenses from your tax bill. “Pay as you Go”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Name the Cloud Types

A

Public - Owned by provider
Private - Data Centers owned by the organization that uses the resources.
Hybrid - Mix between the two.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What Management Responsibilities does the On Premise Model requires you (the customer) to manage?

A 
Applications
Data
Runtime
Middleware
O/S
Virtualization
Servers
Storage
Networking
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What Management Responsibilities does the IaaS model require you to manage?

A 
Applications
Data
Runtime
Middleware
O/S

Requires you to manage the O/S level.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What Management Responsibilities does the PaaS require you to manage?

A

Applications
Data

Only requires you to maintain the middle-ware level.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What Management Responsibilities does the SaaS model require you to manage?

A

Only requires you to maintain the software level.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Tenant

A

Instance for Azure AD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Storage Account

A

Container for the Storage Object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Federated

A

Virtualization of AD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Inbound Security Rules: What happens if an allow rule has a greater priority number (larger number) than a deny security rule?

A

It will deny if the port is included in the rule group. i.e. If you place allow http below denyallinbound rule, it will be denied.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the two types of Availability Sets?

A 
Update Domains (UD): Scheduled maintenance, performance or security updates are sequenced through update domains. (minimum 2, maximum 20)
Fault Domains (FD): Provide a physical separation of workloads across different hardware in a data center. (minimum 2,
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Ripple Update (Instructor Defined)

A

Microsoft managed update deployment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Container (Instructor Defined)

A

Purpose built OS (through Linux) - Only hosts components needed to perform a specific task.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Azure Container Instances

A

A PaaS offering that allows you to upload your containers, which it will run for you.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Azure Kubernetes Services

A

A container orchestration services for managing large numbers of containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Azure Cosmos DB

A

A globally-distributed database service that enables you to elastically and independently scale throughput and storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Azure SQL Database

A

A Relational database as a Service (DaaS) based on the latest stable version of the Microsoft SQL Server database engine.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Azure Database Migration

A

A fully-managed service designed to enable seamless migrations from multiple databases sources to azure data platforms with minimal downtime.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Azure SQL Managed Instance

A

Hosts a SQL Instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

SQL Database

A

Database only (Instance is managed by Azure Service)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Azure SQL Data Warehouse

A

A cloud-based Enterprise Data Warehouse that leverages Massively Parallel Processing (mpp) to run complex queries quickly across petabytes of data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Azure HDInsight

A

Fully-managed, open-source analytics for enterprises. It is a cloud service that makes it easier, faster, and more cost-effective to process massive amounts of data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Azure Data Lake Analytics

A

An on-demand analytics job service that simplifies big data. Instead of deploying and tuning hardware, you write queries to transform your data and extract valuable insights.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Azure Machine Learning Service

A

Provides a cloud-based environment used to develop, train, test, deploy, manage, and track machine learning models

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Azure Machine Learning Studio

A

Collaborative, drag-and -drop visual workspace where you can build, test, and deploy machine learning solutions without needing to write code.

28
Q

Azure Functions

A

(Serverless) Concerned with the code running your service and not the underlying platform or infrastructure. Creates infrastructure based on an event.

29
Q

Azure Logic Apps

A

A cloud service that helps you automate and orchestrate tasks, business processes (BPD), and workflows when you need to integrate apps, data systems and services across enterprises or organizations.

30
Q

Azure Event Grid

A

A fully-Managed, intelligent event routing service that uses a publish-subscribe model for uniform event consumption.

31
Q

Azure Portal

A

Management Website accessed via a web browser: https://portal.azure.com/

32
Q

Azure PowerShell

A

Command shell scripting language

33
Q

Azure CloudShell

A

Shell scripting that supports either PowerShell or Bash through the console. Storage must be mounted initially before use.

34
Q

Azure Command-Line Interface (CLI

A

Cross-platform, command-line scripting program for Windows, Linux, or MacOS.

35
Q

Azure PowerShell Module

A

Az (Install-Module Az)

36
Q

PowerShell supports only these O/S

A

Windows

Linux

37
Q

Azure Firewall

A 
applies inbound and outbound traffic filtering rules.
Built-in HA
Unrestricted Cloud Scalability
Uses Azure Monitor Logging
(FaaS)
38
Q

Azure DDoS Protection

A

Sanitizes unwanted network traffic, before int impacts service availability
Basic service tier is automatically enabled in Azure
Standard service tier adds mitigation capabilities, turned into protect Azure Virtual Network resources.

39
Q

Network Security Groups (NSGs)

A

Set inbound and outbound rules to filter by source and destination IP address, port, and protocol.
Add multiple rules, as needed, within subscription limits
Azure applies default, baseline, security rules new to NSGs.
Override default rules with new, higher priority, rules.

40
Q

Application Security Groups

A

Allows you to reuse your security policy at scale without manual maintenance of explicit IP addresses
Handles the complexity of explicit IP addresses and multiple rule sets, allowing you to focus on your business logic.

41
Q

Security Layers

A 
Physical
Identity & Access
Perimeter
Network
Compute
Application
Data
42
Q

Perimeter layer

A

Protect your networks’ boundaries with Azure DDoS Protection and Azure Firewall

43
Q

Networking Layer

A

Only permitted traffic should pass between networked resources with Network Security Group (NSG) inbound and outbound rules.

44
Q

Authentication

A

Who are you (Instructor Notes)

45
Q

Authorization

A

Permission (Instructor Notes)

46
Q

Azure AD

A

Flat File (not an industry standard format).

47
Q

Azure Key Valut

A

Secrets Management
Key Management
Certificate Management
Storing Secrets backed by hardware security modules (HSMs)

48
Q

Azure Information Protection (AIP)

A

Classifies and protects documents and emails by applying labels. Labels are applied by:
- Automatically using rules and conditions defined by administrators
- Manually, by users
-

49
Q

Azure Advanced Threat Protection (Azure ATP)

A

Cloud-based security solution for identifying, detecting, and investigating advanced threats, compromised identities, and malicious insider actions.
Consists of Azure ATP:
Portal:Dedicated portal for monitoring and responding to suspicious activity
Sensors:Installed directly onto your domain controllers.
Cloud Service: runs on Azure Infrastructure

50
Q

Azure Policy

A

Policy Definitions
Azure pre-defines by default
Evaluates and Identifies Azure resources that do not comply with your policies.
Provides built-in policy and initiative definitions, under categories such as Storage, Networking, Compute, Security enter, and Monitoring.

51
Q

Initiatives

A

Multiple policies grouped together.

52
Q

Initiative Assignment

A

Initiative definitions that are assigned to a specific scope. Initiative assignments reduce the need to make an initiative definition for each scope.

53
Q

Role-based access control (RBAC)

A

Fine-grained access management control over your Azure resources
Available to all Azure subscribers, at no additional cost.

54
Q

Azure Blueprints

A

Create reusable environment definitions that can recreate your Azure resources and apply your policies instantly.

  • Help audit and trace your deployments, and maintain compliance using built-in tools and artifacts.
  • Associate blueprints with specific Azure DevOps build artifacts, and release pipelines for rigorous tracking.
55
Q

Subscription Governance

A

Billing: Reports and charge back can be generated per subscriptions
Access Control: A subscription is a deployment boundary for Azure resources and has the ability to set p role-based access control (RBAC)
Subscription Limits: Subscriptions are also bound to some hard limitations. If there is a need to go over those limits in particular scenarios, then additional subscriptions may be needed. If you hit a hard limit, there is no flexibility.

56
Q

Service Trust Portal

A

servicetrust.microsoft.com
STP used to access
- audit reports across Microsoft cloud services
- guides to using Microsoft cloud services for regulatory compliance
- publications about trust, and how Microsoft Cloud services protects your data.

57
Q

Two types of subscription boundaries

A

Billing Boundary - Subscription type determines how an Azure account is billed for using Azure. You can create multiple subscriptions for different types of billing requirements.
Access Control Boundary - Azure will apply access management policies at the subscription level, and you can create separate subscriptions to reflect different organizational structures.

58
Q

Azure Management Groups

A

Containers for managing access, policies, and compliance across multiple Azure subscriptions

59
Q

Management Groups

A

Allows you to order your Azure resources hierarchically into collections, which provide a further level of classification beyond subscriptions.

60
Q

Four levels of Organizing structure in Azure (Object Hierarchy)

A

Management Groups
Subscriptions
Resource Groups
Resources

61
Q

Three primary factors that affect cost

A

Resource Type
Services
Location

62
Q

Total Cost of Ownership (TOC) calculator

A

Report that compares the difference of different hosting options (i.e. Cloud v On-Prem)

63
Q

Best Practices for Minimizing Costs

A 
Perform Cost Analyses
Monitor Usage
Use Speed limits
 - 
 -
64
Q

Azure Cost Management

A

Provides a set of tools for monitoring allocating and optimizing Azure costs, it will provide the following:

  • Reporting =
  • Data enrichment
  • Budgets
  • Alerting
  • Recommendations
65
Q

Paid Azure support plans

A

Developer
Standard
Professional Direct
Premier

66
Q

If Microsoft cannot meet your company’s SLAs, what will they do?

A

Add credits to your account.

67
Q

Preview feature

A

Trial or improved version realeased to Private or Public
Private - no production support
Public - Production support
Once thuroughly tested, they remove the (private) or (public) tag and make it Generally Available (ga)

Azure Intro AZ-900 (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions