Remaining Flashcards
What is AzCopy?
To share blobs or files (including synchronous files) to or from storage account/ cloud providers
What is Azure Storage Explorer?
Provides a graphical interface to manage files and blobs in Azure Storage Account
What is Azure File Sync?
Lets you centralize your file shares. Bi-directionally syncing files in Azure and local systems
What are the differences between the different Azure AD tiers?
Free - same
Office 365 - same
Premium P1 — RBAC & Conditional access
Premium P2 — Identity protection, Self-service entitlement management and privileged Identity management
How do tags work?
- Tags apply to resource, resource groups and subscriptions
- typically max of 50 tags
- resources do not inherit resource group tags, however permissions are inherited by resources
What is an initiative?
Group of Azure policies
What is a blueprint?
Azure Blueprints is the combination of one or more Policy, Role, ARM Template, and Resource Group.
What is network peering?
Virtual network peering: Connecting virtual networks within the same Azure region.
Global virtual network peering: Connecting virtual networks across Azure regions.
Benefits:
- A low-latency, high-bandwidth connection between resources in different virtual networks.
- The ability for resources in one virtual network to communicate with resources in a different virtual network.
- The ability to transfer data between virtual networks across Azure subscriptions, Azure Active Directory tenants, deployment models, and Azure regions.
- The ability to peer virtual networks created through the Azure Resource Manager.
- The ability to peer a virtual network created through Resource Manager to one created through the classic deployment model.
- No downtime to resources in either virtual network when creating the peering, or after the peering is created.
What is a network security group?
Network Security Group (NSG) is an internal Firewall inside Azure Virtual Network. It allows/blocks traffic based on IP address and Port. NSG can restrict traffic between resources, it can allow Database access only to Web Servers from the outside world.
NSG is attached with subnet and network interface.
What is the Azure App Gateway?
Azure Application Gateway can do URL-based routing. It is a web traffic load balancer which enables us to manage traffic to our web application hosted in the Azure cloud. Layer 7
What is the Azure Load Balancer?
Layer 4 overall load balancer
What is the Azure traffic manager?
DNS based load balancing
What is Azure Express Route?
Azure Express Route is a private and dedicated connection between Azure cloud and an on-premise data centre. It gives high bandwidth with high security.
What are the Azure Defender features?
- Generates a secure score for your subscriptions based on an assessment of your connected resources compared with the guidance in Microsoft cloud security benchmark.
- Provides hardening recommendations
- Analyze and secure your attack paths through the cloud security graph, which is a graph-based context engine that exists within Defender for Cloud.
- Defend PaaS services, things on other clouds and on premise stuff
What is Azure Senteniel?
Azure Sentinel is an intelligent security analytics service for the entire enterprise. It is a security information and event management (SIEM).
Azure Sentinel detect threats and respond very fast with the help of AI.