Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ 104 > Manage Azure identities and governance > Flashcards

Manage Azure identities and governance Flashcards

1
Q

When moving an App Service resource to another resource group what are the following things the resource group must not include?

A

Web Apps
App Service Plans
TLS/SSL Certificates
App Service Enviroments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the two roles in Microsoft 365?

A

Owner
Member

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is an administrative unit?

A

This allows you to restrict users access based on their role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Global Administrator role?

A

This role has access to all AAD and the services aligned with it
Give admin access
Reset password for every admin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Billing Administrator role?

A

Purchase things
In charge of subscription
Maintains service health
Controls support tickets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is User Administrator role?

A

Users and groups can be created and managed
Control support tickets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Azure AD Registerd?

A

This connects your BOYD devices to AAD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is Azure AD Joined

A

This connects your org device to AAD then is syncs to AD on-prem

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Hybird AD Joined

A

This syncs your A on-prem devices to AAD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is an Azure resource lock?

A

This is used to lock azure subscription, resource group, or resource to protect them from accidental user deletions and modifications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the two types of Azure locks

A

Read-only
Delete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is delete lock type?

A

This means authorised users can read and modify a resource, but cannot delete it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What dose read-only lock type mean?

A

This means authorized users can read a resource, but they can’t delete or update it

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

When moving a web app to another resource group what resources mustn’t the new resource group have?

A

Web Apps
App Service plans
Uploaded or imported TLS/SSL certificates
App Service Environments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Management Groups?

A

Management groups are used to organise subscriptions to allow policy and price management easier to delegate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Subscriptions?

A

Subscriptions are used to host resources and groups and are used for management of the polices and pricing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Resource Groups

A

This is a container that hold Azure resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Azure Resources

A

This is manageable item in Azure like VMs, Azure Web App, SQL Database.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is Azure Resource Manager?

A

Azure resource manager is used for creating an deploying of Azure resources.

18
Q

What four things can be used to deploy an Azure Resource?

A

Azure Portal
Azure PowerShell
Azure CLI
REST API Clients

19
Q

What type of resources can be deployed via Azure Resource Manager?

A

VMs
Azure Web App
SQL Database

20
Q

What is a Resource Provider?

A

This is a service that provides the resource. For example, VMs are provided by Microsoft.Compute.

21
Q

What is Azure Resource Manager Template?

A

This is a JSON file (JavaScript Object Notation) that is used to define one or more resources deployed to a resource group or subscription.

22
Q

What dose SSPR stand for?

A

Self-Service Password Reset

23
Q

What is Self-Service Password Reset?

A

SSPR can be abled for all or limited number of users. You can setup authentication methods like security questions, email, SMS, etc. Users have to setup SSPR manually before it will become an option for them to use.

24
Q

What dose RBAC stand for?

A

Role-based Access Control

25
Q

What is RBAC used for?

A

RBAC can restrict what access users can have to Azure Resources. It allows the admin to restrict access per subscription, resource groups or resources and provide either RO or RW access.

26
Q

Why do we use RBAC?

A

This allows businesses to stay compliant with local and global laws with data restrictions and confidentiality. You can either user built-in Azure RBAC roles or create custom roles using JSON files.

27
Q

What are the two types of AD Tenants?

A

B2C (business-to-customer)
B2B (business-to-business)

28
Q

What is B2C?

A

B2C (business-to-customer) is an identity solution for customer facing applications, it has it own independent tenant not connected to AAD and can used local, enterprise or social accounts connections

29
Q

What is B2B?

A

B2B (business-to-business) allows guest access into your Azure environment for collaboration on Azure resources. This works by using external identities like enterprise or social accounts as authentication into the Azure environment.

30
Q

What are features of Azure AD DS

A

Full identify solution
REST API Queries
Communication Protocols
Federation Services
Flat Structure
Managed Service

31
Q

What is Azure Policies?

A

Azure polices service is used to create, assign and manage polices. The polices are used to enforce rules to resources and can show non-compliance status if not following the rules.

32
Q

What are Resource Tags used for?

A

Resource tags can be used to organize resources in Azure, with each tag having a name and a value. Once applied the resource tag you can find the resource using the tags name and value, this helps when trying to find resource across various resource groups.

33
Q

What can the role Account Administrator do?

A

This account is the billing owner of the subscriptions

  • Can access theAzure portaland manage billing
  • Manage billing for all subscriptions in the account
  • Create new subscriptions
  • Cancel subscriptions
  • Change the billing for a subscription
  • Change the Service Administrator
  • Can’t cancel subscriptions unless they have the Service Administrator or subscription Owner role
34
Q

What can the role Service Administrator do?

A

The Service Administrator has the equivalent access of a user who is assigned the Owner role at the subscription scope. The Service Administrator has full access to the Azure portal.

  • Manage services in the Azure portal
  • Cancel the subscription
  • Assign users to the Co-Administrator role
35
Q

What can the role Co-Administrator do?

A

The Co-Administrator has the equivalent access of a user who is assigned the Owner role at the subscription scope.

  • Same access privileges as the Service Administrator, but can’t change the association of subscriptions to Microsoft Entra directories
  • Assign users to the Co-Administrator role, but can’t change the Service Administrator
36
Q

What tools can you use to create administrative units?

A

Azure Portal
MS Graph/Powershell
MS 365 Admin Center

37
Q

What steps should you take to connect a 3rd party domain to AAD?

A

Add a custom domain
Add a record to the public whizlabs.com DNS zone
Verify the domain

38
Q

What are thing to note before moving resources in Azure?

A

Both the source and target group are locked during the move
You can’t add, update or delete resources in the resource group (during the move)
Underlying resources will still work during the move

39
Q

Who can have local admin an an Azure Joined machine?

A

Global Administrator
Device Local Administrator Role
User joining the device

40
Q

When moving resources from one resource group to another. What do you need to keep in mind regarding locks?

A

If the resource being moved has a lock enabled, it doesn’t matter since the resource group lock is the only thing that matters when moving resources.

41
Q

When creating a new tenant in Azure, who has access to the tenant?

A

Only the owner/creator of the tenant

42
Q

If a users in a global admin in tenant A, then another user creates tenant B. What access will they have on tenant B?

A

No access. The users who created the tenant will need to give them access.

43
Q
A

AZ 104 (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions