Remaining Flashcards
What is AzCopy?
To share blobs or files (including synchronous files) to or from storage account/ cloud providers
What is Azure Storage Explorer?
Provides a graphical interface to manage files and blobs in Azure Storage Account
What is Azure File Sync?
Lets you centralize your file shares. Bi-directionally syncing files in Azure and local systems
What are the differences between the different Azure AD tiers?
Free - same
Office 365 - same
Premium P1 — RBAC & Conditional access
Premium P2 — Identity protection, Self-service entitlement management and privileged Identity management
How do tags work?
- Tags apply to resource, resource groups and subscriptions
- typically max of 50 tags
- resources do not inherit resource group tags, however permissions are inherited by resources
What is an initiative?
Group of Azure policies
What is a blueprint?
Azure Blueprints is the combination of one or more Policy, Role, ARM Template, and Resource Group.
What is network peering?
Virtual network peering: Connecting virtual networks within the same Azure region.
Global virtual network peering: Connecting virtual networks across Azure regions.
Benefits:
- A low-latency, high-bandwidth connection between resources in different virtual networks.
- The ability for resources in one virtual network to communicate with resources in a different virtual network.
- The ability to transfer data between virtual networks across Azure subscriptions, Azure Active Directory tenants, deployment models, and Azure regions.
- The ability to peer virtual networks created through the Azure Resource Manager.
- The ability to peer a virtual network created through Resource Manager to one created through the classic deployment model.
- No downtime to resources in either virtual network when creating the peering, or after the peering is created.
What is a network security group?
Network Security Group (NSG) is an internal Firewall inside Azure Virtual Network. It allows/blocks traffic based on IP address and Port. NSG can restrict traffic between resources, it can allow Database access only to Web Servers from the outside world.
NSG is attached with subnet and network interface.
What is the Azure App Gateway?
Azure Application Gateway can do URL-based routing. It is a web traffic load balancer which enables us to manage traffic to our web application hosted in the Azure cloud. Layer 7
What is the Azure Load Balancer?
Layer 4 overall load balancer
What is the Azure traffic manager?
DNS based load balancing
What is Azure Express Route?
Azure Express Route is a private and dedicated connection between Azure cloud and an on-premise data centre. It gives high bandwidth with high security.
What are the Azure Defender features?
- Generates a secure score for your subscriptions based on an assessment of your connected resources compared with the guidance in Microsoft cloud security benchmark.
- Provides hardening recommendations
- Analyze and secure your attack paths through the cloud security graph, which is a graph-based context engine that exists within Defender for Cloud.
- Defend PaaS services, things on other clouds and on premise stuff
What is Azure Senteniel?
Azure Sentinel is an intelligent security analytics service for the entire enterprise. It is a security information and event management (SIEM).
Azure Sentinel detect threats and respond very fast with the help of AI.
What are the benefits of Azure Advisor?
Azure Advisor provides a score to improve the reliability and performance.
For example – Azure Advisor can recommend to take backup, If a VM data backup is not enabled by user.
It also creates Azure Service Health alerts to let the user know about issues in Azure Services.
It also send alerts for optimizing VM by adding or removing VM instances.
Gives guidance on well architecture framework categories.
What does Azure Service Health do?
It also tells about an Azure service which will be decommissioned in future, outages and planned maintenance. Done at the regional level.
What does Azure status do? (part of service health??)
Go to status.azure.com to check Azure health globally per service
What does azure resource health do? (part of service health??)
Is there any issue with resource within your Azure subscription
What is Azure Migrate
Unified Migration tool
What is Azure Databox?
AES encrypted mass data (TB) movement tool to export/import that is NIST 880 compliant for when network options aren’t available. Can either use physical device, data box service or local web UI to implement it.
What is Azure Arc?
Unified tool to manage components between azure, other clouds and on-prem
What is Azure VPN Gateway?
Cheaper version of ExpressRoute (connects on premise to cloud )so the lesser specs are useful for smaller organizations
What is the email/phone support for each support tier?
Developer: Business hrs. by Email
Standard: 24x7
Pro Direct: 24x7
