Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Azure Fundamentals > Microsoft learn course > Flashcards

Microsoft learn course Flashcards

1
Q

What is Azure Portal?

A

Web based, unified console provides alternative to command line tools. Through it you access the GUI.
Present in every data center.
Updates continuously, requires no maintenance downtime.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the 10 main categories of azure services?

A 
Compute (VM, apps)
Networking (connect VPN, load balance. Link computing resources, provide app access, firewall, WAN, netwrk monitor)
Storage
Mobile (Build apps for mobile)
Databases
Web (web apps, api)
IOT
Big data (open source cluster tech)
AI
DevOps (automates software deployment)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the 4 main types of storage in Azure?

A

Blob storage: storage for large objects (video files, bitmaps)
File storage: File shares can be accessed & managed like a file server
Queue Storage: Data store for queuing & reliably delivering messages between apps
Table storage: stores non-relational structured data (no SQL) in cloud, providing key/attribute store with schemaless design.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the Azure IoT hub?

A

Acts as message hub between IoT device & device that manages it.
Managed service.
- connects IoT devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Azure IoT central?

A

Adds dashboard allowing connection, monitoring, and managing IoT.
Prebuilt.
Device templates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is Azure Sphere?

A

Creates end to end highly secure IoT solution.
3 Parts:
- MCU (processes the OS & signals from attached sensors)
- Customized Linux OS (Handles communication w/ security service & can run vendors software)
- Azure Sphere Security Server (AS3) (Makes sure device hasn’t been maliciously compromised)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

When would you choose Azure IoT Sphere for?

A
  • Security is a priority
  • Customer wants a dashboard
  • Customer is connecting IoT devices
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

When would you choose Azure IoT central?

A
  • Security isn’t a priority
  • Customer wants a dashboard
  • Customer is ok with a prebuilt dashboard
  • Customer is connecting IoT devices
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

When would you choose Azure IoT hub?

A
  • Security is not critical
  • Customer does not want a dashboard
  • Customer wants to connect IoT devices
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is a web API?

A

Accessible from servers that accept requests via HTTP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a web API endpoint?

A

Location of code library

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a Azure Machine Learning?

A

Used for making predictions.
Connect data to train & test models to accurately predict a future result.
Experiment and then deploy and use model in real time VIA web API endpoint.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

When would you choose Azure Machine Learning?

A

Data scientists need complete control over design & training of algorithm using your own data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are Azure cognitive services?

A 
Provides prebuilt machine learning models that enable apps to see, hear, speak, understand & even begin to reason.
Pretrained models.
Divided into the following categories:
- Language services
- Speech services
- Vision services
- Decision services
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

When would you choose Azure Cognitive Services?

A

You need to:
Analyze text for emotional sentiment
Analyze images to recognize objects/faces
Make personalized recommendations for users
Moderate content
Detect data abnormalities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Azure Bot Service & Framework?

A

Creates virtual agents (bots) that understand and respond to questions. Bots intelligently communicate w/ humans using other Azure services to understand what Azure counterparts are asking for.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

When would you use Azure Bot Service & Framework?

A

For simple, repetitive tasks.

Customer service bots

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is serverless computing?

A

Normally for back end scenarios.
A server is still used, but it is obscured from the user.
The user only pays for the service they use.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are Azure Functions?

A

You can host a single method or function by using a programmable language in the cloud that runs in response to an event.
Scales automatically, only charges when used.
Stateless.
Durable Functions chain function together.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are Azure Logic Apps?

A

Low or no code platform to automate and orchestrate tasks.

Build app by linking triggers to actions w/ connectors.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the difference between Azure Functions and Azure Logic Apps?

A

Azure Functions = Serverless compute service

Azure Logic Apps = Serverless orchestration service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are Azure DevOps Services?

A

Suite of services addressing every stage of the software development lifecycle

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is Azure Repos (Azure DevOps)?

A

Centralized source code repository where software developers, DevOps engineering & documentation professionals can publish code for review and collaboration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is Azure Board (Azure DevOps)?

A

Project management suite for working items and issues

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is Azure Pipeline (Azure DevOps)?

A

CI/CD pipeline ( series of processes responsible for creating automated and seamless software delivery) automation tool

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are Azure Artifacts (Azure DevOps)?

A

Repository for hosting artifacts, can be fed into testing or deployment pipeline steps
“Azure Artifacts enables developers to share and consume packages from different feeds and public registries.”
Supports multiple package types such as NuGet, Npm, Python, Maven, and Universal Packages.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are Azure Test Plans (Azure DevOps)?

A

Automated test tool that can be used in CI/CD pipeline to ensure quality

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are Github actions? (DevOps)

A

CI/CD toolchains.
Toolchain for delivery, development, management of software apps throughout system development lifecycle. Output of one tool is input of next tool.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is Azure DevTest Labs?

A

Automated means of managing process of building, setting up, tearing down VMs containing builds of software projects.

  • Time saver for quality assurance
  • Anything deployed in Azure via Arm Template can be provisioned via DevTest Labs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is Infrastructure as a Code?

A

Managing hardware & cloud resources when writing code

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is imperative vs declarative code?

A

Imperative code: Details each invalid step to be performed to achieve desired outcome
Declarative code: Details only desired outcome
* Tools based on declarative code can provide more robust approach to deploying dozens/hundreds of resources at the same time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is Azure powershell? Who is the ideal user?

A

Shell to execute CMDLETS, can perform every possible management task in Azure.
Those used to Windows will find this the same as Windows powershell

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is Azure CLI? Who is the ideal user?

A

Executable program to execute commands in Bash (same as powershell, different syntax)
Those used to Linux will find this familiar

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What are ARM Templates?

A

Azure Resource Manager.
Describe resource you want to use in declarative JSON format. Entire format is verified before code is executed.
Creates resources in parallel (50 different instances built the same way)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What is the Azure Advisor Monitoring Solution?

A

Evaluates Azure resources & makes recommendations to improve reliability, security & performance, achieve operational excellence & reduce costs.
Save time on cloud optimization.
5 recommended categories to monitor: Reliability, Security, Performance, Cost, Operational Excellence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is Azure Monitor Monitoring Solution?

A

Collect, analyze, visualize, potentially take action based on metric & logging data from Azure & on premises environment.
Uses it to react in real time.
Can be used to set thresholds for auto scaling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is Azure Service Health Monitoring Solution?

A

Personalized view of health of Azure services, regions, resources, you rely on. Monitors service issues, planned maintenance, health advisories

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

When would you implement Azure Advisor Monitoring Solution?

A

Analyzing Azure usage for optimization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

When would you use Azure Monitor Monitoring Solution?

A
  • Not concerned with optimization
  • Want to look at specific service and user performance
  • You want to measure customized instances
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What are Azure storage services?

A 
Different than a database.
Stores files, messages, tables & other info. Data is secure, highly available, durable, scalable.
Types:
Disk storage.
Blob Storage.
Files.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is Azure Disk storage service?

A

Provides disks for azure virtual machine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is Azure Blob Storage?

A

Object storage solution. Unstructured.
Can store massive amounts of data.
Stored in containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is Azure Files Storage?

A

Fully managed file shares in cloud accessible via server message block & network file system protocols.
Any number of users can access simultaneously.
Share files anywhere via URL & SAS access.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What are the Azure Blob Storage Access tiers?

A

Hot access tier: Storing data accessed frequently.
Cool access tier: Data infrequently accessed, stored at least 30 days.
Archive access tier: Data rarely accessed, stored @ least 180 days, flexible latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What is Azure Cosmos Database?

A

Globally distributed multi model database service.
Elastically and independently scale thruput & storage across any number Azure regions worldwide.
- Supports schema: Less data, allows highly responsive/always on apps.
Store data updated & maintained by users around world
-API flexible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What is Azure SQL database?

A

Relational database based on Microsoft SQL server database.
Use it to build data driven apps & websites in any language without needing to manage infrastructures.
PaaS data base engine. Fully managed.
- Can process relational and non relational data
- Has newest SQL server capabilities.
- Azure database migration service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Azure database for PostGreSQL

A

Relational database server based on PostgreSQL database engine.
2 deployment options:
- Single Server (Basic, General Purpose, Memory Optimized): Vertical scalability, monitoring, 35 day backups, security, pay as you go, high availability.
- Hyperscale (Citus): Horizontally scales queries across machines using sharding.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

When would you use the Hyperscale Azure PostgreSQL database?

A

For apps that require greater scale and performance.
Workloads greater than 100 GB of data.
Faster responses on large databases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

When would you use the Single Server Azure PostgreSQL database?

A

Cloud native applications designed to handle automated patching without the need for granular control on the patching schedule and custom PostgreSQL configuration settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Why would you choose the Basic pricing tier of Single Server Azure PostgreSQL database?

A

Workloads that require light compute and I/O performance. Examples include servers used for development or testing or small-scale infrequently used applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Why would you choose the General Purpose pricing tier of Single Server Azure PostgreSQL database?

A

Most business workloads that require balanced compute and memory with scalable I/O throughput. Examples include servers for hosting web and mobile apps and other enterprise applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Why would you choose the Memory Optimized pricing tier of Single Server Azure PostgreSQL database?

A

High-performance database workloads that require in-memory performance for faster transaction processing and higher concurrency. Examples include servers for processing real-time data and high-performance transactional or analytical apps.

53
Q

What is Azure SQL Managed Instance?

A

Scalable cloud data service. Provides broadest SQL Server database engine compatibility with all the benefits of a fully managed platform service.

  • Easy to migrate on premises data.
  • May offer more options.
54
Q

Why would you choose to use Azure SQL managed instance?

A

For customers looking to migrate a large number of apps from an on-premises or IaaS, self-built, or ISV provided environment to a fully managed PaaS cloud environment, with as low a migration effort as possible.
Supports more server collation than Azure SQL database.

55
Q

What are the Azure SQL Managed Instance service tiers?

A
  • General purpose: Designed for applications with typical performance and I/O latency requirements.
  • Business critical: Designed for applications with low I/O latency requirements and minimal impact of underlying maintenance operations on the workload.
    Both offer 99.99% availiability.
56
Q

What are the 5 steps of the SQL Managed Instance migration process flow?

A 
Discover
Assess
Migrate
Cutover
Optimize
57
Q

What are Azure Synapse Analytics?

A
  • Limitless analytics service that brings together enterprise data warehousing & big data analytics.
  • Can query data on your terms using serverless or provisioned resources at scale. Unified experience for immediate BI & Machine learning needs.
58
Q

Why would you choose Azure Synapse Analytics?

A
  • The only end-to-end platform that unifies data ingestion, big data analytics, and data warehousing.
  • Unite their data, developers, and business users
  • Ingestion & data analysis time significantly reduced
59
Q

What is Azure HDInsight?

A

Fully serviced, open source analytics service for enterprises.

  • Can run open source frameworks & create cluster types
  • Supports extraction, transformation, loading (ETL), data warehousing, machine learning, IoT
60
Q

Why would you choose Azure HDInsight?

A
  • Easier, faster, more cost effective to process massive amounts of data
  • Cloud native
  • Scalable
  • Secure & Compliant
  • Monitoring
  • Global availability
61
Q

What is Azure Databricks?

A

Data analytics platform optimized for the Microsoft Azure cloud services platform.
Offers three environments for developing data intensive applications: Databricks SQL, Databricks Data Science & Engineering, and Databricks Machine Learning.

62
Q

What would you use Azure Databricks SQL for?

A

Easy-to-use platform for analysts who want to run SQL queries on their data lake, create multiple visualization types to explore query results from different perspectives, and build and share dashboards.

63
Q

What would you use Azure Databricks Data Science & Engineering for?

A

Provides an interactive workspace that enables collaboration between data engineers, data scientists, and machine learning engineers.
Use Azure Databricks to read data from multiple data sources and turn it into breakthrough insights using Spark.

64
Q

What would you use Databricks Machine Learning for?

A

Integrated end-to-end machine learning environment incorporating managed services for experiment tracking, model training, feature development and management, and feature and model serving.

65
Q

What is Azure Data Lake Analytics?

A

On demand analytics job service that simplifies big data.

  • Write queries to transform data & extract valuable insights (instead of hardware)
  • Set the dial for amount of power needed
66
Q

What would you use Azure Data Lake Analytics for?

A

Easily develop and run massively parallel data transformation and processing programs in U-SQL, R, Python, and .NET over petabytes of data. With no infrastructure to manage, you can process data on demand, scale instantly, and only pay per job.

67
Q

What DB does Azure Cosmos DB support?

A 
SQL
MONGO DB
Cassandra
Tables
Gremlin APIs
68
Q

What DB would you use for existing lamp stack apps?

A

Azure DB for MySQL

69
Q

What is the ideal option when you have millions of log entries to analyze?

A

Azure Synapse analytics

70
Q

What key networking capabilities can Azure Virtual Networking provide?

A
  • Isolation & segmentation
  • Internet communications
  • Communicate between Azure resources
  • Communicate w/ on premises resources
  • Connect virtual networks
  • Route network traffic
  • Filter network traffic
71
Q

What networking capabilities are offered with isolation and segmentation?

A
  • Create multiple isolated virtual networks

- Can use either DNS or name resolution service that’s built in Azure

72
Q

What networking capabilities are offered with internet communication?

A
  • VMs can connect to internet by default

- Enable incoming connections from internet by defining public IP address or a public load balancer

73
Q

What networking capabilities are offered with communication between Azure resources?

A
  • Enable Azure services secure communication with each other by:
    • Virtual networks or
    • Service Endpoints connect to other Azure resource types enabling you to link multiple Azure resources to virtual networks to improve security & provide optimal routing between resources
74
Q

What networking capabilities are offered with communication with on premises resources?

A

You can create network connecting the cloud and on premises resources by:

  • Point to site VPN
  • Site to Site VPN
  • Azure ExpressRoute (Environments when you need greater bandwidth, higher levels of security, dedicated private connectivity to Azure that doesn’t travel over internet)
75
Q

What networking capabilities are offered with routing network traffic?

A

Default Azure routes traffic between subnets on networks, but you can control routing and override these settings using route tables or border gateway protocols

76
Q

What networking capabilities are offered with filtering network traffic?

A

Filter traffic between subnets by:
Network security groups: Azure resource contains multiple inbound/outbound security rules
Network Virtual Appliances: Specialized VM, like a hardened network appliance

77
Q

What networking capabilities are offered with connecting virtual networks?

A

Using Virtual Network Peering (enables resources in each virtual network to communicate with each other). Can be in separate global regions

78
Q

What can you do with Azure VPN gateway?

A
  • Connect on premises datacenters to virtual networks thru Site2Site connection
  • Connect individual devices to virtual networks thru Point2Site connection
  • Connect virtual networks to other virtual networks thru a Network2Network connection
79
Q

What are the types of VPN gateways?

A

Policy-Based VPN Gateway
Route based VPN Gateway
A basic VPN gateway should only by used for Dev/Test workloads

80
Q

What are the key features of a Policy-Based VPN Gateway?

A
  • Specify statically the IP address of packets that should be encrypted thru each tunnel
  • Support for IKEv1 only
  • Use of static routing
  • typically built on firewall devices that perform packet filtering.
  • IPsec tunnel encryption and decryption are added to the packet filtering and processing engine.
  • Must be used in specific scenarios that require them (EX: compatibility w/ legacy on premises VPN devices)
81
Q

What are the key features of a Route-Based VPN Gateway?

A
  • Preferred method for on premises devices
  • Use Any2Any (wildcard) traffic selectors
  • Can use dynamic routing protocols
  • Use for: connections between virtual networks, Point2Site connections, Multisite connections, co-existence w/ an Azure ExpressRoute Gateway
82
Q

What are the required Azure resources to deploy a VPN gateway?

A 
Virtual network
Gateway subnet
Public IP address
Local network gateway
Virtual network gateway
Connection
Required on premises resources: VPN device supporting Route or Policy based VPN Gateway, Public facing IPv4 address
83
Q

What are the high availability and Fault tolerant configurations for Azure VPN gateways?

A
  • Active / Standby: Backup VPN gateway on standby to take over. Connection will be interrupted for a few seconds
  • Active / Active: Extend availability by deploying VPNs w/ unique public IP & separate tunnels from on premises device to each IP address.
  • ExpressRoute failover: Configure VPN gateway using internet as an alternative method of connection as a fail over
84
Q

What is Azure ExpressRoute?

A

Allows you to extend on-premises networks into Microsoft cloud over private connection with help of connectivity provider.
- ExpressRoute connections do not go over the public internet.

85
Q

What are the features and benefits of Azure ExpressRoute?

A
  • Offers higher reliability, faster speeds, consistent latencies, higher security than typical internet
  • Connectivity to Microsoft Cloud Services across all regions in geopolitical region (can upgrade to global connectivity to all regions)
  • Dynamic routing between your network and Microsoft via BPG
  • Built in redundancy in every peering location
  • Connection uptime SLA
  • Layer 3 connectivity between on premises network & Microsoft cloud thru connectivity provider
86
Q

What are the 3 connectivity models to connect on premises network to Microsoft cloud that Azure ExpressRoute supports?

A
  • Cloud Exchange Colocation: Offer layer 2 & 3 connections between infrastructure & Microsoft Cloud
  • Point2Point Ethernet connection: Layer 2 & 3 connectivity between on premises site & Azure
  • Any2Any Networks: integrate your WAN w/ Azure by providing connections to your offices & data centers. Layer 3 behaves like connectivity between datacenter & any branch offices
87
Q

What is a unique security considerations for Azure ExpressRoute?

A

Data doesn’t travel over public internet, it is a private connection from on premises infrastructure to Azure infrastructure

88
Q

What is Azure Sentinel?

A

Microsoft cloud based SIEM (sec. info & event management) using intelligent security analytics & threat analysis

89
Q

What does Azure Sentinel enable you to do?

A
  • Collect cloud data @ scale
  • Detect previously undetected threats (built in or custom analytics)
  • Investigate threats with AI (investigation graphs)
  • Respond to incidents rapidly (Azure Monitor playbooks are used to automate responses to threats via Block or Ignore)
90
Q

What is Azure Key Vault?

A

Centralized cloud service for storing apps secrets in a single, central location. Provides secure access to sensitive info by providing access control & logging capabilities

91
Q

Azure Key Vault can:

A
  • Manage secrets (tokens, passwords, certificates, API keys etc)
  • Manage encryption keys
  • Manage SSL/TLS certs (provision, manage, deploy public/private SSL/TLS certs for Azure & internal resources)
  • Store secrets backed by hardware security modules & protected by software or FIPS 140-2 LEVEL 2 VALIDATED HSMs
92
Q

What are the benefits of Azure Key Vault?

A
  • Centralized app secrets
  • Securely stored secrets & keys
  • Access monitoring & control
  • Simplified admin of application secrets (enroll/renew CA)
  • Integration w/ other Azure services
93
Q

What is an Azure Dedicated Host?

A

Provides dedicated physical servers to host your Azure VMs for Windows & Linux

94
Q

What are the benefits of Azure Dedicated Host?

A
  • Visibility into & control over server infrastructure running your Azure VM
  • Helps address compliance requirements by deploying workloads on an isolated server
  • Lets you choose # of processors, server capabilities, VM series, VM sizes w/in same host
95
Q

What are some availability considerations for Azure Dedicated Host?

A
  • Provision multiple hosts in a host group & deploy VMs across this group for high availability
  • VMs on dedicated hosts are also able to have Maintenance Control
96
Q

What are the layers of Defense in Depth?

A 
Physical Security
Identity & access
Perimeter (DDoS protection to filter large scale attacks)
Network
Compute (Secures access to VMs)
Application
Data
97
Q

What is Azure Firewall?

A

Stateful firewall

  • offers high availability, unrestricted cloud scalability
  • Uses static public IP address for virtual network resources, enabling outside firewalls to ID traffic coming from your virtual network
  • Integrated w/ Azure Monitor
98
Q

What can you configure with Azure Firewall?

A
  • App rules that define fully qualified domain names that can be accessed from a subnet
  • Network rules that define source address, protocol, destination port, destination address
  • NAT rules that define destination IP addresses & ports to translate inbound requests
99
Q

What is Azure DDoS protection?

A

Protects Azure apps by analyzing/discarding DDoS traffic @ Azure network edge before it can effect availability

100
Q

What are the Azure DDoS Protection Service Tiers?

A

Basic: Automatically enabled for free
Standard: Additional mitigation capabilities tuned specifically to Azure Virtual Network Resources

101
Q

What are Azure Network Security Groups?

A

Enables you to filter traffic to & from Azure resources w/in an Azure virtual network

  • Like an internal firewall
  • Can specify as many rules as you need w/in Azure Subscription limits
102
Q

What Azure Services would you use to Secure the perimeter layer to form a complete Network Security Solution?

A
  • Azure DDoS protection (filter large scale attacks)

- Perimeter Azure Firewalls to ID & alert malicious attacks against the network

103
Q

What Azure Services would you use to Secure the network layer to form a complete Network Security Solution?

A
  • Implement secure connectivity to on premises networks
  • Restrict inbound internet access & limit outbound where appropriate
  • Deny by default
  • Limit communication between resources by segmenting network & configuring access controls
104
Q

What are some recommended Azure services to combine for added security?

A
  • Network Security Groups & Azure Firewall

- Azure Application Gateway Web App Firewall & Azure Firewall

105
Q

What is Azure Active Directory?

A

Microsofts could based identity & access management service.
You control identity accounts, Microsoft makes service globally available
- Connecting on premises AD with Azure AD Microsoft monitors suspicious sign in attempts

106
Q

What services does Azure AD provide?

A
  • Authentication
  • Single Sign on
  • Application Management
  • Device management (Azure AD supports registration of devices)
107
Q

What is Azure AD connect

A

Synchronizes user identities between on premises AD & Azure AD

108
Q

What services provide Azure AD multifactor authentication?

A

Azure AD

Multifactor authentication for Office 365

109
Q

What is Azure Conditional Access?

A

Tool Azure AD uses to allow/deny access to resources based on signals (who, where, what device)

110
Q

What is Azure RBAC?

A

Controls access, built in or defined
- Applied to scope (resource/set of resources):
Management group, single subscription, single resource, resource group

111
Q

What is an Azure management group?

A

A collection of multiple subscriptions

112
Q

How is Azure RBAC enforced?

A

Thru Azure Resource Manager

application security must be handled by the application

113
Q

What does Azure Resource Lock do?

A

Prevents resources from being accidentally deleted or changed

114
Q

What are the levels of locking available for Azure Resource Lock?

A

CanNotDelete: Authorized people can still read/modify, no delete
Read only

115
Q

What would be a good Azure resource to combine with Azure Resource Lock to define a set of standard Azure resources that your organization requires?

A

Azure Blueprint

116
Q

What are Resource Tags in Azure?

A

Organizes resources, provide extra info (metadata)

- Azure Policy can be used to do this

117
Q

What does Azure Policy allow you to do?

A
  • Enables you to define individual or groups of policies (known as initiatives)
  • Evaluates resources & highlights what isn’t compliant with policies you have made
  • Can also prevent noncompliant resources from being created
  • In some cases, autoremediates noncompliant resources/configs (ie togs)
  • Integrates into DevOps
118
Q

How do you create an Azure Policy?

A
  1. Create policy definition
  2. Assign the definition to resources (policy assignment = policy definition that takes place w/in specific scope)
  3. Review evaluation results (compliant/non compliant)
119
Q

What is an Azure Policy Initiative?

A

Way of grouping related policies into one set

- Initiative definition contains all policy definitions (i.e enable monitoring in Azure Security Center

120
Q

What is Azure Blueprints?

A

Dfine a repeatable set of governance tools & standard Azure resources your organization requires
- With this, you can rapidly build & deploy new environments w/in compliance

121
Q

How do you implement an Azure Blueprint?

A
  1. Create Azure Blueprint
  2. Assign the Blueprint
  3. Track Blueprint Assignments
122
Q

What are Azure Blueprint Artifacts?

A

Each component in the Blueprint

- Can/May not have parameters

123
Q

What is Cloud Adoption Framework for Azure?

A

Helps customers create & implement business & tech strategies needed to succeed in Cloud

124
Q

What stages are included in the Cloud Adoption Framework for Azure?

A
  1. Define your strategy
  2. Make a plan
  3. Ready your organization
  4. Adopt the cloud
  5. Govern & manage your cloud environments
125
Q

What is TCO in relation to Azure Cloud Services?

A

Total Cost of Ownership

  1. Define workloads
  2. Adjust assumptions
  3. View report
126
Q

What are Azure Management Groups?

A

organize subscriptions into containers called “management groups” and apply your governance conditions to the management groups

127
Q

What is an Azure Tenant?

A

Azure Active Directory entity that encompasses a whole organization. A tenant has one or more subscription and user.

128
Q

What is an Azure Resource Group?

A

A container that holds related resources for an Azure solution.
A resource group might contain storage, virtual machines, apps, dashboards, services, or almost anything you deal with in Azure.

129
Q

What are the three main types of test management artifacts in Azure Test Plans?

A
  • TEST CASES validate individual parts of your code or app deployment. You can ensure your code works correctly, has no errors, and meets business and customer requirements.
  • TEST SUITES group test cases into separate testing scenarios within a single test plan. Grouping test cases makes it easier to see which scenarios are complete.
  • TEST PLANS group test suites and individual test cases together. Test plans include static test suites, requirement-based suites, and query-based suites.

Azure Fundamentals (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions