Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Az 104 > Az 104 > Flashcards

Az 104 Flashcards

(104 cards)

Start Studying
1
Q

What is Azure Active Directory (Azure AD)?

A

Azure AD is Microsoft’s cloud-based identity and access management service. It is used for authentication and authorization in Azure, Microsoft 365, and other cloud applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Azure AD Connect, and why is it used?

A

Azure AD Connect is a tool that syncs on-premises Active Directory (AD) objects (users, groups, passwords) with Azure AD. It enables hybrid identity and single sign-on (SSO).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How does Azure AD Join differ from Hybrid AD Join?

A

Azure AD Join → Device is only in Azure AD (cloud-only).
Hybrid AD Join → Device is joined to both on-prem AD and Azure AD (hybrid setup).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does the NetLogon service do in Active Directory?

A

The NetLogon service handles authentication requests for domain-joined computers in on-prem AD. It does not sync users to Azure AD.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How do you check the Azure AD Connect sync status?

A

Get-ADSyncScheduler

Displays the sync schedule and last sync status.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Name two security enhancements in Azure AD.

A
  1. Multi-Factor Authentication (MFA) – Adds an extra verification step for users.
  2. Conditional Access – Enforces security rules based on location, device, etc.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How does Pass-Through Authentication (PTA) differ from Password Hash Sync (PHS)?

A

PHS – Syncs password hashes to Azure AD, allowing authentication in the cloud.
PTA – Sends authentication requests to on-prem AD in real-time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the role of VPNs or ExpressRoute in a hybrid identity setup?

A

VPNs or ExpressRoute provide secure connectivity between on-prem AD and Azure AD, allowing domain controllers to communicate with cloud services securely.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What troubleshooting steps should you take if a user is not syncing to Azure AD?

A
  1. Check the Azure AD Connect sync status using:
    Get-ADSyncScheduler
  2. Manually force a sync if needed:
    Start-ADSyncSyncCycle -PolicyType Delta
  3. Ensure the user object is in scope for synchronization.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

PowerShell Cmdlets for Azure VM Image Creation

A

First, generalize the VM using Sysprep. Then, use Azure Storage tools like AzCopy or the Azure Portal to upload the VHD. Finally, use New-AzImageConfig and New-AzImage to create the image resource.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Automating VM Configuration

A

Use the Azure Custom Script Extension.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Updating VPN Clients for Routing Changes

A

Download and reinstall the updated VPN client package from the Azure Virtual Network Gateway’s Point-to-Site configuration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Steps to Update a VPN Client in Azure

A
  1. Go to Azure Portal → Virtual Network Gateway (VNetA). 2. Navigate to ‘Point-to-Site Configuration.’ 3. Download the updated VPN client package. 4. Uninstall the existing VPN client on the Windows 10 workstation. 5. Install the new VPN client and reconnect.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Site-to-Site VPN vs. Point-to-Site VPN

A

Site-to-Site VPN: Connects an on-premises network to an Azure virtual network. Point-to-Site VPN: Connects individual client devices to an Azure virtual network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Static vs. Dynamic Routing in VPN Gateways

A

Static routes require manual updates to include new network prefixes, whereas dynamic routing automatically learns new routes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

PowerShell Cmdlets for Azure VMs

A

New-AzImageConfig: Creates a configuration object for an Azure VM image.
New-AzImage: Creates an Azure VM image resource from a generalized VHD.
New-AzVM: Creates a new Azure virtual machine.
Add-AzImageDataDisk: Adds a data disk to an existing VM.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the purpose of SQL Server Always On availability groups?

A

SQL Server Always On availability groups provide high availability and disaster recovery for databases by maintaining a primary replica for read-write operations and secondary replicas for read-only or backup operations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What role does an Azure internal load balancer play in SQL Server Always On configurations?

A

An Azure internal load balancer acts as a listener, routing client traffic to the active primary replica of the availability group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What type of health probe is typically used for SQL Server Always On availability groups with an ILB?

A

A TCP health probe on a custom port (e.g., 59999) is used to monitor the status of SQL Server instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Is session persistence necessary for SQL Server Always On configurations with an ILB?

A

Session persistence is not typically required for SQL Server Always On configurations. It is often set to ‘None’ as SQL Server manages connections through the listener.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the purpose of enabling Floating IP (Direct Server Return) in ILB configurations for SQL Server Always On?

A

Floating IP allows the load balancer to route traffic directly to the active SQL Server instance without rewriting the destination IP address, which is critical for Always On availability groups.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Why is creating an HTTP health probe on port 1433 incorrect for SQL Server Always On?

A

Port 1433 is used for SQL Server database engine connections, not HTTP. A TCP health probe on a custom port is needed, not HTTP on port 1433.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are the key configurations needed for an ILB to act as a listener for SQL Server Always On?

A

Key configurations include enabling Floating IP (Direct Server Return), setting up a TCP health probe on a custom port, and defining appropriate load-balancing rules.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Name three ways you can manage Azure services.

A

Azure Portal, Azure CLI, and Azure PowerShell.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is the purpose of the Azure portal dashboard?
To provide a customizable view of your Azure resources and services.
26
How do you access the Azure Cloud Shell from the Azure portal?
By clicking the Cloud Shell icon in the top navigation bar.
27
Can you create multiple dashboards in the Azure portal?
Yes, you can create and customize multiple dashboards.
28
How can you find a specific service or resource in the Azure portal if you don't know where it is located?
Use the search bar at the top of the portal.
29
What is the purpose of 'Azure Preview' features?
To allow users to test upcoming features before they are generally available.
30
Is it possible to share a customized Azure portal dashboard with other users?
Yes, dashboards can be shared with specific users or groups.
31
Where can you find information about the health of Azure services in a specific region?
In Azure Service Health.
32
What are the benefits of customizing the Azure portal dashboard?
Improved efficiency, personalized view, quick access to services, and better monitoring.
33
How do you navigate to different Azure services within the portal?
Using the navigation menu on the left side of the portal.
34
What is Azure Advisor?
A tool that provides recommendations for optimizing Azure resources for cost, performance, security, and reliability.
35
How do you access Azure Advisor?
From the navigation menu in the Azure portal.
36
What is Azure Cost Estimator?
A tool that helps estimate costs for Azure services before deploying them.
37
How do you manage Azure subscriptions within the portal?
Through the 'Subscriptions' section in the navigation menu.
38
What is Azure Resource Groups?
A way to organize related resources for easier management and billing.
39
How do you create a new Azure Resource Group?
By navigating to 'Resource groups' in the navigation menu and clicking 'New resource group.'
40
What is Azure Role-Based Access Control (RBAC)?
A system for controlling access to Azure resources based on user roles.
41
How do you assign roles in Azure RBAC?
Through the 'Access control (IAM)' section in the resource or resource group settings.
42
What is Azure Monitor?
A service that provides monitoring and analytics capabilities for Azure resources.
43
What is Azure Policy?
A service that helps enforce compliance and governance across Azure resources.
44
How do you access Azure Policy?
From the navigation menu in the Azure portal.
45
What is Azure Service Health?
A service that provides personalized health information and alerts for Azure services.
46
How do you access Azure Service Health?
From the navigation menu in the Azure portal.
47
What is Azure Cost Analysis?
A tool that helps analyze and manage Azure costs.
48
How do you access Azure Cost Analysis?
Through the 'Cost Management + Billing' section in the navigation menu.
49
What is Azure Active Directory (AAD)?
A service that provides identity and access management for Azure resources.
50
How do you manage Azure Active Directory users?
Through the 'Azure Active Directory' section in the navigation menu.
51
What is Azure Security Center?
A service that provides threat protection and security monitoring for Azure resources.
52
How do you access Azure Security Center?
From the navigation menu in the Azure portal.
53
What is a UDR in Azure?
A custom route created by users to control traffic in a VNet.
54
Where do you apply a Route Table containing UDRs?
At the subnet level.
55
What’s a typical use case for a Virtual Appliance as a next hop?
To send traffic through a firewall or NVA.
56
What is the effect of setting next hop to 'None'?
Traffic is blocked to the destination.
57
Which has higher priority—UDR or system route?
UDR overrides system routes.
58
Does a UDR apply to inbound or outbound traffic?
Outbound only.
59
What next hop type is used to route traffic to the internet?
Internet.
60
What does NSG stand for and what does it control?
Network Security Group – controls inbound/outbound traffic.
61
What does ASG stand for and what is it used for?
Application Security Group – logically groups VMs for NSG rules.
62
Can you apply an NSG to a VM directly?
Yes, via its NIC.
63
What evaluates first: subnet NSG or NIC NSG?
Both are evaluated, and the most restrictive rule applies.
64
Can ASGs contain IP addresses?
No – only VM NICs can be members of ASGs.
65
What happens if two rules in an NSG conflict?
The rule with the lowest priority number wins.
66
What's the default behavior of an NSG if no custom rule matches?
Default rules apply, like: Deny all inbound from the internet Allow VNet-to-VNet traffic
67
What is Azure Bastion used for?
Secure browser-based RDP/SSH to VMs without using public IPs.
68
What is the required name for the Bastion subnet?
AzureBastionSubnet
69
Which port is used by Azure Bastion?
Port 443 (HTTPS)
70
Can you RDP to a VM using Bastion if the VM has no public IP?
✅ Yes
71
Does Azure Bastion work across VNets by default?
❌ No, unless you're using Bastion Premium with VNet peering.
72
What is the minimum subnet size for Azure Bastion?
/27
73
Is Azure Bastion free?
❌ No, it’s billed by usage and data.
74
What does a Service Endpoint do?
Extends VNet to Azure services over Azure backbone, using public service DNS.
75
What does a Private Endpoint do?
Maps a private IP from your VNet to an Azure service using Private Link.
76
Can you use DNS with Private Endpoints?
✅ Yes, but it uses private DNS zones (e.g. privatelink.blob.core.windows.net).
77
Do Service Endpoints require public IPs?
❌ No, traffic goes over Azure backbone, not public internet.
78
Are Service Endpoints free?
✅ Yes, included in the price of the Azure service.
79
What is the main purpose of Azure DNS?
To host and manage DNS domains, resolving domain names to IP addresses for public or private access.
80
What is the difference between a public and private DNS zone?
Public DNS zones resolve names for internet access; private DNS zones resolve names within Azure VNets.
81
What is required to use Azure DNS for a public domain like contoso.com?
Delegate the domain by updating the registrar’s NS records to Azure’s name servers (e.g., ns1-01.azure-dns.com).
82
Which DNS record type maps a name to an IPv4 address?
A record.
83
Why is a private DNS zone critical for private endpoints?
It resolves the service’s DNS name (e.g., privatelink.blob.core.windows.net) to a private IP within the VNet.
84
What does TTL in a DNS record control?
The time (in seconds) that resolvers cache the record before querying again.
85
Can Azure DNS host a domain without delegating it to Azure’s name servers?
No, delegation to Azure’s name servers is required for Azure DNS to manage the domain.
86
Name a common use case for a private DNS zone.
Resolving private endpoint names (e.g., Azure SQL) to private IPs within a VNet for secure access.
87
What layer does Azure Load Balancer operate at, and what protocols does it handle?
Layer 4 (Transport Layer), handles TCP and UDP protocols.
88
What is the purpose of a health probe in Azure Load Balancer?
Checks the health of backend resources (e.g., VMs) to ensure only healthy ones receive traffic.
89
What’s the difference between Basic and Standard SKU for Azure Load Balancer?
Basic is free, limited features, no SLA. Standard supports availability zones, SLA, and is production-grade.
90
Name the five main components of Azure Load Balancer.
Frontend IP, Backend Pool, Health Probe, Load Balancing Rules, NAT Rules. (Mnemonic: F-B-H-L-N)
91
What is session persistence, and what are its options?
Controls how client requests are routed. Options: None, Client IP, Client IP and Protocol.
92
When would you use a Public Load Balancer vs. an Internal Load Balancer?
Public: For internet-facing apps (e.g., websites). Internal: For private apps within a VNet (e.g., databases).
93
How does Azure Load Balancer ensure high availability?
Uses Availability Zones (Standard SKU) or Availability Sets to distribute VMs and handle failures.
94
What is the purpose of a NAT rule in Azure Load Balancer?
Maps specific ports to allow direct access to backend VMs (e.g., SSH on port 22).
95
What is the purpose of an Azure Load Balancer?
Distributes incoming network traffic across multiple VMs to ensure high availability and performance.
96
What are the two types of Azure Load Balancer?
Public (for internet traffic) and Internal (for private network traffic).
97
What is a backend pool in the context of a load balancer?
A group of VMs that receive traffic from the load balancer.
98
Why is a health probe necessary for load balancing?
It checks if VMs are healthy (e.g., responding on port 80) to ensure traffic is sent only to operational VMs.
99
What does an availability set do for VMs?
Places VMs across different physical servers (fault domains) and update schedules (update domains) to ensure high availability.
100
What port is typically used for HTTP traffic in a load balancing rule?
Port 80.
101
What is the role of a Network Security Group (NSG) in a load balancing setup?
Controls traffic by allowing or denying specific ports (e.g., allow port 80 for HTTP).
102
Why should VMs be in the same VNet for load balancing?
Ensures they can communicate with the load balancer and each other securely.
103
What is session persistence in a load balancing rule?
Ensures a user’s requests go to the same VM for consistency (also called client IP affinity).
104
What SKU is recommended for production load balancing in AZ-104?
Standard SKU (supports advanced features and availability zones).

Az 104 (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions