Manage Identities and Governance in Azure Flashcards

Azure AD; User & Group Accounts

1
Q

Multi-tenant cloud-based directory and identity management service

A

Azure AD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A dedicated and trusted instance of Azure AD

A

Azure tenant/directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Differences between Azure AD and AD DS

A
  • Identity Solution; -REST API Querying; Communication Protocols; Federation Services; Flat Structure
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Azure AD uses the __ __ over __ and ___.

A

REST API; HTTP & HTTPS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Communication protocols that can be used by Azure AD:

A

SAML, WS-Federation, OpenID Connect (OAuth)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Azure AD Four Editions:

A

Free, Microsoft 365 Apps, Premium P1, Premium P2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Azure AD Edition included with an Azure Subscription

A

Free

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Azure AD edition available through a Microsoft Enterprise Agreement, the Open Volume License Program, and the Cloud Solution Providers program

A

Premium editions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Azure AD edition that adds in Identity Protection & Governance

A

Premium P2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Designed to provide access to organizational apps and resources and to simplify Windows deployments of work-owned devices

A

Azure AD Join

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

AD Join benefits:

A

SSO, Enterprise state roaming, Access to Microsoft Store for Business, Windows Hello, Restriction of Access, Seamless access to on-premise resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Azure AD two options:

A

Registering & Joining

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

AD defines users in 3 ways:

A

Cloud, Directory-synchronized, Guest users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Examples include accounts from other cloud providers and Microsoft accounts such as Xbox LIVE accounts

A

Guest users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Deleted users can be restored for ___ days.

A

30

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

In addition to the Portal, Users can also be added to Azure AD through ___, ___, and the ___.

A

Microsoft 365 Admin Center, Microsoft Intune admin console, and the CLI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Azure AD allows you to define two different types of groups:

A

Security & Microsoft 365 groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Provide collaboration opportunities by giving members access to a shared mailbox, calendar, files, SharePoint site, and more

A

Microsoft 365 Groups

19
Q

Three ways to assign access rights (add members to groups):

A

Assigned, Dynamic User, Dynamic Device (Security groups only)

20
Q

Can manage administrative units by using the __, ___ __ & ___, or ___.

A

Azure Portal, PowerShell Cmdlets & Scripts, or Microsoft Graph

21
Q

Regional pairs key knowledge:

A

Physical isolation, Platform-provided replication, Region recovery order, Sequential updates, Data residency

22
Q

Azure prefers at least ___ miles of separation between datacenters in a regional pair.

A

300

23
Q

Logical unit of Azure services that is linked to an Azure account

A

Azure subscription

24
Q

Four ways to get an Azure subscription:

A

Enterprise, Resellers, Partners, Personal

25
Q

Enterprise agreement SLA

A

99.95%

26
Q

Commonly used subscriptions are:

A

Free, Pay-as-you-go, Enterprise Agreement, Student

27
Q

Azure free subscription - credit to spend on any service for the first ___ days; free access to most popular Azure products for ___ months; access to more than __ products that are always free

A

30, 12, 25

28
Q

Each resource or resource group can have a maximum of ___ tag name/value pairs.

A

509

29
Q

Pricing benefit for customers who have licenses with Software Assurance.

A

Azure Hybrid Benefits

30
Q

Provide a level of scope above subscriptions

A

Management group

31
Q

A service in Azure that you use to create, assign, and manage policies

A

Azure Policy

32
Q

Main advantages of Azure Policy:

A

Enforcement & Compliance, Apply policies are scale, Remediation

33
Q

To implement Azure Policies, do:

A

(1) Browse Policy Definitions (2) Create Initiative Definitions (3) Scope the Initiative Definition (4) View Policy Evaluation Results

34
Q

Object that represents something that is requesting access to resources (ex: user, group, service principal, managed identity)

A

Security Principal

35
Q

Collection of permissions that lists the operations that can be performed (ex: Reader, Contributor, Owner, User Access Administrator)

A

Role Definition

36
Q

Boundary for the level of access that is requested (Ex: management group, subscription, resource group, resource)

A

Scope

37
Q

Attaching a role definition to a security principal at a particular scope

A

Assignment

38
Q

Each role is a set of properties defined in a ___ file.

A

JSON

39
Q

A resource ___ role assignments from its parent source.

A

Inherits

40
Q

Manage access to Azure Resources

A

Azure RBAC Roles

41
Q

Manage access to Azure AD Resources

A

Azure AD Roles

42
Q

Four fundamental built-in-roles

A

Owner, Contributor, Reader, User Access Administrator

43
Q

Role allows a user to create and manage virtual machines

A

Virtual Machine Contributor