Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ-104 > Random > Flashcards

Random Flashcards

1
Q

What minimum Azure Active Directory (AD) license is required to use conditional access?

A

Premium p1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Number of policies in an initiative?

Number of parameters in an initiative?

A

1000 policies

300 parameters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How many parameters in a policy? Maximum

A

Max 20

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does wa import export tool do for encryption?

A
  • It encrypts the data on the drive with Advanced Encryption Standard (AES) 256-bit BitLocker.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which Azure command-line interface (CLI) command would you use to create a policy definition?

A

Az create policy definition create

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How many Vnets can you have per subscription per region?

A

50

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Why would you use Static IP on your VNET

A

For DNS Name resolution
For linked TSL/SSL
For role-baed VMs such as domain controllers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does Azure DNS do?

A

Name resulution between vnets & to the internet (public zone)
Delegate domain from other domain
Create alias record for domain
It integrates with ARM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a DNS Name server?

A

Server to which a rquiest is sent that links a url to an IP address

Note, domain registrar (like godaddy) can be idfferent from hosting provider/name server (like azure)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

To what can you apply a network security group?

A

Vnet and VM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is VNet Peering & what types are there?

A

Linking 2 vnets together (because by default a vnet is not connected, only routing within vnet is possible).

Vnet peering is possible local (within region) and global (across regions)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Is Vnet peering network encrypted?

A

Nope, but that is because it is already private and sent via microsoft backbone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the benefit of UDR ?

A

You can create transitive routing in a hub-spoke vnet setup.
To do so you don’t need a VPN gateway in peered network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Why would you need a gateway subnet?

A

To communicate outside of peering network. Use a VPN or expressroute to do so

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Who can do DNS management stuff?

A

Only the global admin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is needed for custom DNS record verification?

A

MX or TXT file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What does a NAT do?

A

Translates public to private IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are network rules on a firewall, and what are they made up of?

A

They trafic all non-http/s traffic. Must have name, protocol, source and destination address, and dest port.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are firewall application rules?

A

They define FQDNs that can be accessed from a subnet. For example, specify the win update network traffic through the firewa.. Protocols are HTTP/HTTPS, and set target fqdn.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which commands are for Information about :

  • DNS Zones
  • DNS record set
A

Get-AzDnsZone -name FQDN -Resourcegroupname Name

Get-AzDnsRecordSet - ZoneName

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which command is for reviewing NS (name server) records?

A

nslookup arecord

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which steps are there in configuring a VPN gateway?

A
  • Create vnets & subnets
  • SPecify dns server (optional)
  • Create gateway subnet
  • Create VPN gateway
  • Create Local Network Gateway
  • Config vpn device (optional, on-prem)
  • Create VPN connection
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is a vpn gateway?

A

Specific type of virtual network gateway that is used to send encrypted traffic between an Azure virtual network and an on-premises location over the public Internet. You can also use a VPN gateway to send encrypted traffic between Azure virtual networks over the Microsoft network.

A virtual network gateway is composed of two or more VMs that are deployed to a specific subnet you create called the gateway subnet. Virtual network gateway VMs contain routing tables and run specific gateway services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How many VPN gateways can be linked to a Vnet

A

one

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What type of intersite connection options are there?

A

Site to Site
Point to site
Expressroute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is Azure Virtual WAN

A

Linkes azure cloud connectivity services liek site to site vpn, express route, point to site vpn, etc. into 1 interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are the VWAN SKU differences?

A

Basic - Site to site vpn only

Standard - All configurations; p2s, s2s, interhub, vnet to vnet transiting

28
Q

Which are next hops in UDR routing

A

NOT load balancer!

Internet, Virtual network Gateway, Vnet, none

29
Q

Can you probe via HTTPS with a load balancer?

A

That depends on the SKU. You can with standard, but not with basic. With basic only HTTP and TCP.

30
Q

What is the SLA of a basic load balancer?

A

There is none! For standard, it is 99.99%

31
Q

How many backend pools can you have for a load balancer?

A

300 for basic, 1000 for standard.

32
Q

How secure are different load balancer SKUs?

A

Basic is open by default, NSG possible. Standard is closed unless allowed by a NSG. Internal traffic is allowed.

33
Q

When would you use Standard general purpose v2 storage

A

In most cases. Can work for blob, file, quele, table and data lake storage

34
Q

What are the four types of redundancy storage?

A

LRS –> local redundant : redundant in 1 center
ZRS –> zone redundant: 2 datacenters in 1 region
GRS/ RA-GRS –> geo redundant : multiple regions, 1 datacenter in each region
GZRS/ RA- GZRS –> geo zone redundant : multiple centers in multiple regions

35
Q

What storage account types for redundancy?

A

LRS –> GPv1, GPv2, Blob
ZRS –> , GPv2,
GRS/ RA-GRS –> GPv1, GPv2, Blob
GZRS/ RA- GZRS –> , GPv2

36
Q

What protocols do those intersite connections use best?
P2S
S2S
Expressroute

A

P2S –> active/passive
S2S –> active/passive or active/active
Expressroute –> active/active

37
Q

What is the SLA for GRS/ GZRS?

A

99,99….9 (16 9’s)%

38
Q

What is the storage account url for the different services?

A 
//mystorageaccount.xxx.core.windows.net 
--> xxx = blob/table/queue/file
39
Q

What is one of the main benefits of azure file share?

A

you can access the files from anywhere in the world using a URL that points to the file and includes a shared access signature (SAS) token.

40
Q

How can blobs be accessed?

A

Objects in Blob storage can be accessed from anywhere in the world via HTTP or HTTPS.

Users or client applications can access blobs via URLs, the Azure Storage REST API, Azure PowerShell, Azure CLI, or an Azure Storage client library.

41
Q

What type of blobs exist and how are they used?

A

File blob –> store text and binary data. Block blobs are made up of blocks of data that can be managed individually. Block blobs can store up to about 190.7 TiB.
Append blob –> log files
Page blob –> store random access files up to 8 TiB in size. Page blobs store virtual hard drive (VHD) files and serve as disks for Azure virtual machines

42
Q

What is a managed hard disk?

A

block-level storage volumes that are managed by Azure and used with Azure VMs.
Managed disks are like a physical disk in an on-premises server but, virtualized. With managed disks, all you have to do is specify the disk size, the disk type, and provision the disk.

Unmanaged disks are VHD files that are stored as page blobs in Azure storage accounts. The page blobs created by tenants are referred to as VM disks and are stored in containers in the storage accounts.
I think unmanaged disks are regular VHDs as page blobs in a storage account

43
Q

Can you have more than one app on a app service plan?

A

Yes, multiple apps possible

44
Q

What app service plan is needed to have staging slots?

A

Standard, premium, isolated.

NOT: Free, shared, basic

45
Q

Which services can be ‘endpoint service’?

A

Azure AD, cosmos db, cognitive services, eventhub, keyvault, service bus, sql, storage

46
Q

Name functions of AZ copy

A

You can copy an entire account to another account (blob)
Log files are created for every instance
Authentication is done via SAS or Azure AD

You can restart and resume failed jobs, and retries transfer automatically after failure

47
Q

What is the standard syntax for AZcopy

A

azcopy copy [source] [destination] -flags

48
Q

What is the naming convention of VMs?

A

A-N letters determining workload,
number describing typ and nr of vCPUs
generation
e.g. D2av2

49
Q

What are custom script extensions?

A

They can launch and execute virtual machine customization tasks post configuration.

install the CSE from the Azure portal by accessing the virtual machines Extensions blade. Once the CSE resource is created, you will provide a PowerShell script file. Your script file will include the PowerShell commands you want to execute on the virtual machine.

50
Q

Azure Cosmos DB is a fully managed IaaS/PaaS/SaaS?

A

platform-as-a-service (PaaS)”

51
Q

Azure backup is IaaS,Paas or SaaS?

A

Azure Backup is architected from the ground-up as a first-class PaaS service in Azure

52
Q

Azure SQL database is a fully managed IaaS/PaaS/SaaS?

A

PaaS

53
Q

Microsoft SQL server on a VM is..IaaS/PaaS/SaaS?

A

IaaS

54
Q

Azure App Services is ..IaaS/PaaS/SaaS?

A

PaaS

55
Q

Azure Storage is.. IaaS,Paas or SaaS?

A

PaaS

56
Q

What are the stages in the Microsoft Cloud Adoption Framework for Azure?

A

Define strategy - plan - adopt - govern - manage

57
Q

When you delegate permissions to several VMS, you must deploy them..

A

to the same resource group –> scope access control for administrative actions

58
Q

Can you access resources outside of your resource group?

A

Yes! A resource can interact with resources in other resource groups.

SO:
Azure resources can only access other resources in the same group: nope

59
Q

You plan to store 20 TB of data in Azure. The data will be accessed infrequently and visualized by using Microsoft Power BI.
You need to recommend a storage solution for the data.
Which two solutions should you recommend?

A

Denk: Big data. Dus:

Azure Synapse Analytics (formerly Azure SQL Data Warehouse) and Azure Data Lake

60
Q

What is the difference between local and virtual network gateway?

A

A Local Network Gateway is an object in Azure that represents your on-premise VPN device. A Virtual Network Gateway is the VPN object at the Azure end of the
VPN. A Site-to-Site VPN connection is what connects the Local Network Gateway and the Virtual Network Gateway to bring up the VPN.

61
Q

Can you change the tenant to which a subscription is associated?

A

Yes

62
Q

Can you link a subscription to multiple tenants?

A

No but the other way around is possible ofc, multiple subs within one tenant

63
Q

Your company plans to migrate to Azure. The company has several departments. All the Azure resources used by each department will be managed by a department administrator.
What are two possible techniques to segment Azure for the departments?

A

Multiple subscriptions & multiple resource groups

64
Q

What do you need to link on-prem devices to vms in azure?

A

Local network gateway
Virtual network gateway
gateway subnet –> virtual network gateway needs to be located in a dedicated subnet in the Azure virtual network. This dedicated subnet is known as a gateway subnet and must be named”GatewaySubnet”

65
Q

How many admins can a subscription have?

A

You can have 1 Account Administrator and 1 Service Administrator, but you can have 200 Co-Administrators per subscription

66
Q

What is an unmanaged disk?

A

Unmanaged disks are VHD files that are stored as page blobs in Azure storage accounts. The page blobs created by tenants are referred to as VM disks and are stored in containers in the storage accounts.

AZ-104 (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions