Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Azure Master > Introduction > Flashcards

Introduction Flashcards

1
Q

What ARM stand for?

A

Azure Resource Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What RBAC stand for?

A

Role-based Access Control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Two deployments models in Azure

A
  • ASM - Azure Service Model (old)

- ARM - Azure Resource Model (new)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Can resources be provisioned on different Azure regions and belong to the same resource group?

A

YES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Does every resource need to be a part of resource group?

A

YES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is Idempotent feature?

A

Ensures predictability, standarization and consistency in resource deployment by ensuring that every deployment will result in the same state of resources and configuration, no matter the number of times it is executed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What technology is Azure running on?

A

Azure runs on a customized version of Hyper-V. It’s fairly close to Hyper-V core in construct or theory, but that’s where all the similarities end.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Four ways to interact with Azure

A
  • Azure Portal
  • PowerShell
  • CLI
  • REST API
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Feature to ensure that applications are still available even when a data center goes down.

A

Availability zones.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Feature to provide provide redundancy at a data center level, similar to locally redundant storage

A

Availability sets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Azure fault domain?

A

A fault domain is a logical group of underlying hardware that share a common power source and network switch, similar to a rack within an on-premises datacenter. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these fault domains.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is availability set?

A

An Availability Set is a logical grouping capability for isolating VM resources from each other when they’re deployed. Azure makes sure that the VMs you place within an Availability Set run across multiple physical servers, compute racks, storage units, and network switches.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Azure update domain?

A

An update domain is a logical group of underlying hardware that can undergo maintenance or be rebooted at the same time. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these update domains.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Azure Availability Zones?

A

Availability Zones is a high-availability offering that protects your applications and data from datacenter failures. Availability Zones are unique physical locations within an Azure region. Each zone is made up of one or more datacenters equipped with independent power, cooling, and networking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Two Azure features for load balacing?

A
  • Load Balacers (layer 4)

- Application Gateways (layer 7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Cookie-based session affinity?

A

Feature in Application Gateway feature in which all subsequent requests following the first request should be processed by the same service instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is Secure Sockets Layer (SSL) offload?

A

SSL offload helps in transferring cryptography processing from the web server to the load balancer, thereby providing more resources to web servers serving users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is End-to-end SSL?

A

Application Gateway feature which allows mission-critical secure applications that need complete SSL encryption and decryption even if traffic passes through load balancers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is URL-based content routing?

A

Application gateway traffic redirection based on the URL content of incoming requests.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Packet fields used for load balancing in Azure?

A
  • Originating IP address
  • Target IP address
  • Originating port number
  • Target port number
  • Type of the protocol (TCP, HTTP, etc.)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is Azure Traffic Manager?

A

Traffic Manager helps us to create highly available solutions that span multiple geographies, regions, and data centers. It uses DNS to redirect requests to an appropriate endpoint .

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is VM scale sets (VMSS)

A

Azure compute resource that you can use to deploy and manage a set of identical VMs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is max number of VM in VMSS (VM Scale Sets)

A
  • 1,000 VMs when using a platform images

- 100 VMs if using a custom image

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How Authentication is performed in Azure?

A

OpenID Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

How Authorisation is performed in Azure?

A

OAuth

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What Integrity mean?

A

Integrity ensures that the payload and message exchange between sender and receiver is not tampered with.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What NSG stand for?

A

Network Security Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What OMS stand for?

A

Operations Management Suite

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Four services of Azure Storage Account

A
  • blob
  • files
  • queues
  • tables
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is shared access signature (SAS)?

A

URI that grants restricted access rights to Azure storage services: blob, files, queues, and tables

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What TDE stand for?

A

Transparent Data Encryption - the technology used by SQL Server for encrypting data at rest.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What DDM stand for?

A

Dynamic Data Masking - masking certain types of data, such as credit cards or user PII data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Is Azure Key Vault per region or globally deployed?

A

per region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Two important security resources to manage all security aspects of the Azure subscription, resource groups, and resources?

A
  • Azure Monitor

- Azure Security Center

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Default maximum number of storage accounts per subscription?

A

200

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Max size of file share

A

5TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Two types of disks in Azure

A
  • Managed

- Unmanaged

38
Q

Linux encryption method in Azure?

A

DM-Crypt

39
Q

Within an Azure Resource Manager (ARM) template, what three elements are required in a JSON template?

A

$schema, contentVersion and resources

40
Q

Within an Azure Resource Manager (ARM) template, what statement describes the purpose of the $schema element?

A

The $schema element specifies the location of the JSON schema file.

41
Q

What is Azure Resource Manager’s (ARM) default template deployment mode?

A

Incremental mode

42
Q

In Azure Resource Manager (ARM) templates what advantage do variables provide?

A

Variables simplify template expressions.

43
Q

Two types of Queues in Azure

A
  • Azure Storage Queues

- Azure Service Bus Queues

44
Q

Which Azure-managed storage encryption feature encrypts data within an Azure Storage account, and decrypts it on read without requiring key management or additional configuration steps?

A

Server-Side Encryption for Data at Rest

45
Q

Which encryption method applies to Azure blobs only?

A

Storage Service Encryption

46
Q

Which blob type is the most suitable for logging scenarios?

A

Append blob

47
Q

What is one reason to use a Shared Access Signature instead of an account key?

A

To provide access to a client that can’t be trusted with the account key

48
Q

Which blob type is optimized for IaaS virtual machines?

A

Page blob

49
Q

Two tiers of application gateway?

A
  • standard

- WAF (web application firewall)

50
Q

DNS level load balancing

A

Traffic Manager

51
Q

Application Level load balancing

A

Application Gateway

52
Q

Traffic Manager load balancing modes.

A
  • weighted
  • priority
  • performance
53
Q

What is global vnet peering?

A

Virtual Network Peering for vnets in different regions

54
Q

How to disable default routing to the public Internet?

A

User-defined route to override the default

55
Q

What is PHS?

A

Password Hash Synchornization - sign in method used as a part of hybrid identity solution

56
Q

What is PTA?

A

Pass-Through Authentication - allows users to sign in to both on-prem and cloud-based app with the same password.

57
Q

What is Federation?

A

Collection of domains with an established trust, which typically includes authentication and almost always authorisation.

58
Q

Which Microsoft Azure Site Recovery (ASR) component is responsible for the replication during a failover from Azure?

A

Master target server

59
Q

Which feature enable developers with the ability to perform A/B testing on Azure App Service apps, and provides you a separate deployment environment along with the default production environment?

A

Deployment Slots

60
Q

Within Azure Batch, what is a batch job?

A

A collection of tasks

61
Q

How is a Batch pool created in Azure Batch?

A

Manually by the user or automatically by the Batch service when the job is specified

62
Q

What is Azure Logic App?

A

An offering that provides the developer with visual designer that can be used to model and automate workflows.

63
Q

Four Components of Azure Storage Account?

A
  • Blob
  • Table
  • Queue
  • File
64
Q

What is a shared access signature (SAS)

A

URI that grants restricted access rights to Azure Storage resources

65
Q

Three authorization techniques in Azure

A
  • Access Keys
  • Shared access Signatures
  • Azure Active Directory
66
Q

How many copies are created in case of Locally-redundant storage?

A

3

67
Q

Zone-redundant storage protection

A

Helps to protect against data center level failures

68
Q

Geo-redundant storage protection

A

Helps to protect against region failures

69
Q

Does VM restart cause data on temporary disk loss?

A

No

70
Q

Does VM STOP cause data on temporary disk loss?

A

Yes

71
Q

Does VM restart cause public IP reallocation?

A

No

72
Q

Does VM STOP cause public IP reallocation?

A

Yes

73
Q

Which resources can have NSG attached?

A
  • subnet

- NIC

74
Q

Can VNET peering be enabled across regions?

A

YES

75
Q

Can VNET peering be enabled across subscriptions?

A

YES

76
Q

What is Azure Resource Manager?

A

Azure Resource Manager (ARM) is the native platform for infrastructure as code (IaC) in Azure.

77
Q

Four sections of Azure Resource Manager Template

A
  • Resources
  • Variables
  • Parameters
  • Outputs
78
Q

Three types of snapshots in Azure

A
  • Application consistent
  • File-system consistent
  • Crash consistent
79
Q

Describe application-consistent snapshot

A

backup service captures the memory content, pending I/O operations

80
Q

Describe file-system snapshot

A

backup service takes a snapshot of all the files at the same time

81
Q

Describe crash-consistent snapshot

A

this happens if the virtual machine shuts down at the time of the backup process

82
Q

What’s required to attach additional NIC to an Azure VM

A

Stop the Azure VM you want to attach an additional NIC

83
Q

Is VPN gateway highly available?

A

Yes, Each VPN gateway has two instances, one in active and one in standby.

84
Q

What is Password Hash Synchornization?

A

Azure AD Connect synchronizes a hash of a hash, of user’s password from an on-premises AD instance to a cloud-based Azure AD instance

85
Q

What is Pass-through authentication?

A

similar to password hash synchronization, but here the users’ passwords is directly validated against the on-premise AD. This allows organizations to enforce their on-premise AD security and password policies

86
Q

Azure Load Balancer 3 SKUs

A
  • Basic
  • Standard
  • Gateway
87
Q

What is Azure Application Gateway?

A

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. OSI layer 7

88
Q

Is dedicated subnet required for the application gateway?

A

YES

89
Q

What is Azure Front Door?

A

Azure Front Door is a global, scalable entry-point that uses the Microsoft global edge network to create fast, secure, and widely scalable web applications.

Front Door works at Layer 7 (HTTP/HTTPS layer) using anycast protocol with split TCP and Microsoft’s global network to improve global connectivity.

90
Q

What is the mandatory subnet name for Azure firewall?

A

AzureFirewallSubnet

91
Q

What are Azure Blueprints?

A

Helps to define a repeatable set of processes that can adhere to an organization’s standards and patterns.

Azure Master (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions