Prerequisites for Azure administrators Flashcards
What is the purpose of the Azure Resource Manager?
To work with the resources in your solution as a group; Deploy, update, or delete all the resources for your solution in a single, coordinated operation.
How does azure resource manager perform deployment?
By configuring a template that can work for different environments such as testing, staging, and production.
How can tasks through the Azure Resource Manager be performed?
Azure PowerShell, Azure CLI, Azure portal, REST API, and client SDKs.
How is Azure Resource Manager secured?
Integrated with Role-Based Access Control (RBAC) to apply access controls to services in a resource group.
What is best practice for arranging resources either by group or by tag?
Arrange resources with the same lifecycle in a resource group. Use tags for all other organizing of resources.
What is best practice for deployment of resrouces?
Define and deploy your infrastructure through the declarative syntax in Azure Resource Manager templates, rather than through imperative commands; You should have no manual steps for setting up your solution.
What is the most efficient way to manage resrouces?
By running imperative commands.
Define a ‘resource provider’
A service that offers a set of resources and operations for working with an Azure service.
List common resource providers
Microsoft.Compute
Microsoft.Storage
Microsoft.Web
Define the function of the Microsoft.Compute service provider
Supplies virtual machine resources.
Define the function of the Microsoft.Storage service provider
Supplies storage account resources.
Define the function of the Microsoft.Web service provider
Supplies resources related to web apps.
Define a ‘template’
A JavaScript Object Notation (JSON) file that defines one or more resources to deploy to a resource group; Defines the dependencies between the deployed resources.
Define ‘declarative syntax’
Programming concept that focuses on describing what the coder wants to achieve, rather than how they will achieve it.
How does Azure leverage declarative syntax?
Resource Manager template is an example of declarative syntax; In the file, you define the properties for the infrastructure to deploy to Azure.
What is the purpose of the Microsoft.KeyVault resource provider?
To store keys and secrets in a resource type called vaults.
Can a resource exist in multiple resource groups?
No, resources can only exist in one resource group.
Can resource groups be renamed?
No, resource Groups cannot be renamed.
What is best practice for structure of resource groups?
All the resources in your group should share the same lifecycle; If one resource, such as a database server, needs to exist on a different deployment cycle it should be in another resource group.
What is the best way to control access to a set of like resources?
Group resources based on scope or level of access.
Can a resource group contain resources from different regions?
Yes.
Can a resource interact with a resource in a different resource group?
Yes.
What must be specified when creating a resource group?
Location of the resource group.
Why must a resource group have a specified location?
The resource group stores metadata about the resources; When you specify a location for the resource group, you’re specifying where that metadata is stored.
Define a ‘Read-Only’ resource lock
Prevents any changes to the resource.
Define a ‘Delete’ resource lock
Prevents deletion - but other changes are allowed.
Can resources be moved between azure subscriptions?
Yes.
What occurs to the source and target resource group when moving a resource between the two?
Both groups are locked during the operation; Write and delete operations are blocked on the resource groups until the move completes.
How is a resource group moved?
By selecting the resource group containing the resource, and then select the move button.
What is the outcome of deleting a resource group?
Deleting a resource group deletes all the resources contained within it.
What is the PowerShell command to remove a resource group?
Remove-AzResourceGroup
Do azure resources have a limit?
Yes - there is a max usage limit on resources.
How can Azure cloud shell help better secure a shell interface?
Azure Cloud Shell also provides cloud store files such as SSH keys.
When using Azure Cloud Shell, what feature can be used to save scripts and other files for later use?
Azure CloudDrive.
Can file directories be mounted to the Cloud shell?
Yes - Cloud Shell also lets you map an Azure Storage File Share; Lets you work with the contents of that share through Cloud Shell.
Considering best practice, what is the max time a cloud shell session should be left open for?
No more than 20 minutes; The session is disconnected without warning, and the current state is lost.
Does the Azure Cloud Shell allow for a user to elevate privledge?
No.
Can additional tools and modules be installed to the cloud shell?
No.
Can a user open multiple sessions at the same time?
No; Azure Cloud Shell allows only one instance at time and isn’t suitable for concurrent work across multiple subscriptions or tenants.
You have a script stored on the Cloud Shell storage. You constantly use this script for resource management, but you need to perform small changes to it. Which of these solutions is the best way to handle the situation?
Use the Cloud Shell editor to make the necessary changes and save it directly on the CloudDrive.
What is the naming convention for PowerShell cmdlets?
Named according to a verb-noun naming standard.
What is the PowerShell command to list all approved verbs?
Get-Verb
What is the PowerShell command to list all of the available cmdlets?
Get-Command
Using the Get-Command cmdlet, what does the filter “-Noun ___*” achieve?
Targets the part of the command name that’s related to the noun; Searches for all cmdlets whose noun part starts with string before the *.
Using the Get-Command cmdlet, what does the filter “-Verb” achieve?
Targets the part of the command name that’s related to the verb; Searches for all cmdlets whose verb part starts with the supplied verb.
What is the maximum number of parameters in an Azure Resource Manager Template?
You’re limited to 256 parameters in a template.
Define Azure Bicep in comparison to Azure Resource Manager Templates
Domain-specific language (DSL) that uses declarative syntax to deploy Azure resources instead of using JSON template.
How does Azure Bicep Deploy a configuration?
Bicep template is converted into a JSON template through transpilation.
Define ‘transpilation’
The process of converting source code written in one language into another language.
What happens if the same template is run a second time?
Azure Resource Manager doesn’t change the deployed resources.
What parameter is an element in the template schema?
Outputs; Used to return values from the deployed resources.