Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

D338 > Skill 1.3 Manage Subscriptions and Governance > Flashcards

Skill 1.3 Manage Subscriptions and Governance Flashcards

1
Q

What is a resource in Azure

A

A single service instance, which can be a virtual machine, a virtual network, a storage account or any other Azure Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are resource groups

A

logical groupings of resource or those single-service instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How many resource groups can a resource exist in

A

one resource group that cannot be renamed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Azure Policy

A

Azure Service that can be used to create, assign, and manage policies that enforce governance in your Azure Environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does Azure Policy include

A

application of rules that allow or deny a given resource type,
apply tags automatically, and
even enforce data sovereignty

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What provides a mechanism to express how the environment is governed for all users at a specified scope regardless of RBAC assignments

A

Azure Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does Azure RBAC default to for access

A

default deny with an explicit allow mechanism, whearas Policy is default allow mechanism with an explicit deny system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does azure policy definition do

A

describes your desired behavior for Azure resources at the time resources are created or updated.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What do you declare though a policy definition

A

what resources and resource features are considered compliant within your Azure environment and what should happen when a resource is non-compliant

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the four Azure Policy Scope

A

Management Groups
Subscriptions
Resource Groups
Resource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What do excluded scopes do

A

Allow you to model your environment with rich devalrations in the form of Policy definitions that are applied exactly as required by your organizations governance needs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are Azure Resource Locks

A

They are used to prevent the accidental deletion or modification of resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the two resource lock types

A

CanNotDelete
ReadOnly

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does the CanNotDelete Resource Lock do

A

Prevents the deletion of a resource. it only prevents deletion but not the modification

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does a ReadOnly Resource lock do

A

Prevents users from modifying a resource including updating or deleting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What can resource locks be applied to

A

A subscription, resource group, and resource scopes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What do resource tags do?

A

allow you to apply custom metadata to your Azure resources to logically organize them and to build out custom taxonomies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is a resource tag

A

A name and a value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are some common tag types

A

environment with which a resource is associated, a cost center or billing code, and resource owner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Where must tags be applied

A

At the resource scope to be visible in detailed usage exports. Tags applied the resource group scope are not inherited by child resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What access is needed to apply tags to a subscription, resource group, or resource

A

Write Access (Contributor Role or higher)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Can tags be applied in both a imperative and declarative manner

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is required for tags to be applied to all resources

A

Because tags do not have inheritance you have to individually tag all resources in a resource group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What values can be used with the Update-AzTag Command

A

Replace – replaces the specified tags in the listed resources
Merge – Merges the newly specified tags with the existing ones and overrides the conflicts for the listed resources
Delete – Deletes the specified tags from the listed resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Are resources locked when moving from one resource group to another

A

yes

26
Q

What requirements must be met to move resources between subscriptions

A

The subscriptions must be associated with the same resource tenant

27
Q

How many resources can be moved with a single move operation

A

800

28
Q

Where can a resource group be deleted from

A

Azure Portal, Azure Powershell, the Azure CLI, or the REST API

29
Q

What controls do Azure Subscriptions have available to govern access to resources

A

Quotas and Tagging for Costs,
Azure Policy to govern the resources allowed in an environment

30
Q

What access to Classic Subscription Administrators have access to

A

Full Access to an Azure Subscription with the ability to manage resources through the Azure Portal, Resource Manage API’s

31
Q

The account that is signed up for an Azure Subscription is automatically set at what

A

Account Administrator and Service Administrator

32
Q

Who can create a new Azure subscription and make billing changes

A

The account administrator

33
Q

How many account administrators can there be per account

A

one

34
Q

How many service administrators can there be per subscription

A

one

35
Q

What is the difference between a co-administrator and a service administrator

A

There can be 200 co-administrators but they cannot change the association of subscriptions

36
Q

What role does a Service Administrator and a Co-Administrator have equivelant access to

A

Owner

37
Q

What are the Azure RBAC roles

A

Owner
Contributor
Reader

38
Q

What access does a Azure RBAC owner have access to

A

Fulll access to all resources and can delegate access to others. The service administrator and Co-Administrators are assigned the owner role at the subscription scope. Applies to all resource types

39
Q

What does an Azure RBAC owner have permissions to do

A

Full access to all resources. Delegate access to others. The service administrator and Co-Administrators are assigned the Owner role at the subscription scope. Applies to all resource types

40
Q

What does the Aure RBAC Contributer have access to do

A

Create and Manage all types of Azure resources. Cannot grant access to others. Applies to all resource types

41
Q

What does Azure RBAC reader role have access to

A

View Azure resources

42
Q

What does the Azure RBAC User Access Administrator have access to do?

A

Manage User Access to all resources

43
Q

What do management groups allow

A

they allow you to apply governance across subscriptions, including the application of common RBAC controls and the application of Azure policy

44
Q

What are the benefits of Azure management groups

A

Reduce Overhead
Enforcement
Reporting

45
Q

Who inherits RBAC applied at the management group

A

All child resources within the scope of the management group

46
Q

What are Azure Resource Quotas

A

Used to view the consumption and usage of resources within an Azure subscription and understand how that consumption can be affected by azure resource limits

47
Q

What are Azure Spending Quotas

A

allow administrators to set alerts within an Azure subscription by configuring budgets to inform the business when there azure spending has hit a certain threshold. It does not stop resources from being created or consumed.

48
Q

What are resource limits

A

They can be used to stop a resource from being created.

49
Q

What is submitting a request to increase a quota

A

Submitting a request to Microsoft

50
Q

How can you view resource consumption within a subscription against a resource quota

A

With powershell

51
Q

What are Azure Cost Management budgets

A

Provide Azure Customer subscriptions under many offer types with the ability to proactively manage cost and monitor azure spend over time at a subscription level.

52
Q

What rights must a user have to view Azure Budgets

A

Reader rights (Read Access) to the subscription

53
Q

What rights must a user have to create and manage budgets

A

Contributor or higher

54
Q

What are two specialized roles that can be used to grant principals access to data

A

Cost Management Contributor
Cost Management Reader

55
Q

What Scopes can budgets be created at

A

Subscription
Management Group
Resource Group SCope

56
Q

What are Action Groups

A

A collection of notification preferences

57
Q

What is Cost Management

A

Includes features for performing cost analysis,
setting per-subscription budgets and alerts,
setting recommendations for optimization
Exporting cost management data to performs deeper analysis

58
Q

What is cost management service dictated by

A

Scopes

59
Q

What is required to view cost management

A

Read Access

60
Q

What are the two ways to export a template

A

Export from a resource group or resource
Save from history

61
Q
A

D338 (18 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions