Design and Implement a Storage Strategy (20-25%) Flashcards

1
Q

What are the 2 types of SAS keys?

A
  1. Service SAS - delegate to resource in one of the storage services
  2. Account SAS - delegate to resources in one or more storage services
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a Shared access signature (SAS)?

A

A shared access signature is a signed URI that points to one or more storage resources and includes a token that contains a special set of query parameters. The token indicates how the resources may be accessed by the client.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the 2 forms of SAS keys?

A
  1. Ad hoc SAS

2. SAS with stored access policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

True/False: A shared access signature URI is associated with the account key used to create the signature, and the associated stored access policy (if any). If no stored access policy is specified, the only way to revoke a shared access signature is to change the account key.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are Stored Access Polices?

A

Stored access policies give you the option to revoke permissions without having to regenerate the storage account keys. Set the expiration on these very far in the future (or infinite) and make sure it’s regularly updated to move it farther into the future.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the max characters allowed in a Stored Access Policy for the Unique Signed Identifier?

A

64 characters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the max number of access policies (Stored Access Policy) allowed on a container ?

A

5

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

True/False: To revoke a stored access policy, you can either delete it, or rename it by changing the signed identifier. Changing the signed identifier breaks the associations between any existing signatures and the stored access policy. Deleting or renaming the stored access policy immediately effects all of the shared access signatures associated with it.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the max number of days for a Retention Policy?

A

356 Days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What value do you use if you dont want a retention policy and want to be responsible for deleting the monitoring data when you see fit?

A

0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How are metrics stored in Azure?

A

in Table Storage of an Azure storage account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the name of the blob container for diagnostic logs?

A

$logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Max Size of Storage Analytics?

A

20TB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the process to update a Storage Access Key(s)?

A
  1. Update connection sting in app code to reference the second access key.
  2. Regenerate Primary Access key for the storage account
  3. Update connection strings in code for primary keys
  4. regenerate Secondary keys in the same manner.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

3 Azure CDN Offerings?

A

Standard Akamai, Standard Verizon, Premium Verizon

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Default Cache time on CDN?

A

7 days

17
Q

Default CDN url?

A

.azureedge.net

18
Q

Why can you Not use SSL if you use a Custom Domain with CDN?

A

If you use a CNAME, you cannot use SSL because the CDN uses its own single SSL certificate, and this certificate will not match your custom domain/subdomain names.

19
Q

What are the 3 types of Query String Caching for CDN and what do they do?

A
  1. Ignore Query Strings - This is the default mode. The CDN edge node will pass the query string from the requestor to the origin on the first request and cache the asset. All subsequent requests for that asset that are served from the edge node will ignore the query string until the cached asset expires.
  2. Bypass caching for URL with query strings - In this mode, requests with query strings are not cached at the CDN edge node. The edge node retrieves the asset directly from the origin and passes it to the requestor with each request.
  3. Cache every unique URL - This mode treats each request with a query string as a unique asset with its own cache. For example, the response from the origin for a request for foo.ashx?q=bar would be cached at the edge node and returned for subsequent caches with that same query string. A request for foo.ashx?q=somethingelse would be cached as a separate asset with its own time to live.
20
Q

How is Token Authentication used for Azure CDN?

A

Allows you to prevent Azure CDN from serving assets to unauthorized clients. This is typically done to prevent “hotlinking” of content, where a different website, often a message board, uses your assets without permission.
It verifies requests are generated by a trusted site by requiring requests to contain a token value containing encoded information about the requester. Content will only be served to requester when the encoded information meet the requirements, otherwise requests will be denied.

21
Q

How long can it take for Azure Verizon CDN options to propagate?

A

up to 90 minutes

22
Q

What is the CNAME subdomain you need for intermediary verification of your CDN Endpoint?

A

cdnverify.www or cdnverify.cdn.

23
Q

How can you purge the CDN?

A

Using the Purge Button in either the CDN endpoint blade or the CDN profile Blade

24
Q

What are the 2 options for Compression with the CDN?

A
  1. Enable compression on your origin server, in which case the CDN will pass through the compressed files and deliver compressed files to clients that request them.
  2. Enable compression directly on CDN edge servers, in which case the CDN will compress the files and serve it to end users, even if they are not compressed by the origin server
25
Q

Which feature restricts Azure CDN content by country?

A

Geo-Filtering

26
Q

How is Geo-Filtering used in Azure CDN?

A

Set the path of a file/folder to be blocked or allowed based on a Country Code.

27
Q

Default URL for Azure SQL db?

A

.database.windows.net

28
Q

CLI: Create SQL DB Logical Server

A

az sql server create

29
Q

CLI: Create SQL DB

A

az sql db create

30
Q

PS: Create SQL DB Logical Server

A

New-AzureRmSqlServer

31
Q

PS: Create SQL DB

A

New-AzureRmSqlDatabase

32
Q

What type of file is used to import/export data and schema into Azure SQL?

A

.bacpac

33
Q

What type of file is used to import/export schema info Azure SQL or Visual Studio?

A

.dac

34
Q

What is Active Geo-Replication for Azure SQL?

A

A database can have up to four readable secondary databases in the regions of your choice. These secondary databases are kept synchronized with the primary database using an asynchronous replication mechanism. This feature is used to protect against business disruption if a data center outage occurs or during an application upgrade. Active geo-replication can also be used to provide better query performance for read-only queries to geographically dispersed users.

35
Q

What is Point-in-Time restore for Azure SQL?

A

Uses the automated backups function to recover a copy of the database to a known good point in time within your retention period.

36
Q

PS: Restore SQL DB

A

Restore-AzureRmSqlDatabase

37
Q

What are the 2 Storage options for Azure Backup?

A
  1. Locally redundant storage (LRS) replicates your data three times (it creates three copies of your data) in a paired datacenter in the same region. LRS is a low-cost option for protecting your data from local hardware failures.
  2. Geo-redundant storage (GRS) replicates your data to a secondary region (hundreds of miles away from the primary location of the source data). GRS costs more than LRS, but GRS provides a higher level of durability for your data, even if there is a regional outage.
38
Q

What is a Recover Services Vault?

A

A Recovery Services vault is an online storage entity in Azure used to hold data such as backup copies, recovery points, and backup policies. You can use Recovery Services vaults to hold backup data for Azure services and on-premises servers and workstations.

39
Q

What is Azure Site Recovery?

A

Azure Site Recovery coordinates virtual-machine and physical-server replication, failover, and failback. It keeps your workloads available (Site Recovery) when outages occur.