Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

AZ900 > AZ-900 > Flashcards

AZ-900 Flashcards

(95 cards)

Start Studying
1
Q

What is Platform as a Service (PaaS)?

A

Middle ground between IaaS and SaaS - only the data and application layers of the IT Stack are controlled by the customer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Infrastructure as a Service (IaaS)?

A

Places the most responsibility on the customer. The Cloud Service Provider only provides virtualized hardware resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is Software as a Service (SaaS)?

A

Most responsibility lies with the Cloud Service Provider. The customer only controls the data layer as the applications are installed by the CSP in their own environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Define computing services.

A

Services that include common IT infrastructure such as Virtual Machines, Storage, Databases, and Networking.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What kind of Cloud Models are there?

A

Public Cloud, Private Cloud, Hybrid Cloud, Multi-Cloud, Sovereign Cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a Private Cloud?

A

A cloud used by a single entity. Resources are owned by a single organization, not shared among others.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a Public Cloud?

A

A cloud built, controlled, and maintained by a third-party cloud provider. E.g. AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is a Hybrid Cloud?

A

A computing environment that uses both Public and Private clouds in an inter-connected environment.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a Sovereign Cloud?

A

A cloud used by government entities that function as private clouds but have characteristics of public clouds due to their sheer scale.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Operational Expenditure (OpEx)?

A

Money is spent on services over time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Capital Expenditure (CapEx)?

A

Money is spent once, up front to purchase or secure tangible resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Scalability?

A

Refers to the ability to adjust resources based on demand.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the difference between Horizontal Scaling and Vertical Scaling?

A

Vertical - Scale up or down in power to your existing resources. Horizontal - Scale out and add more machine nodes to existing infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the layers of the IT Stack?

A

Data
Application
Frameworks and Runtime
Patches and Hotfixes
Operating System
Hardware
Power, cooling, internet
Physical Space

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the key characteristics of Cloud Computing?

A

Resources Pooling, Elasticity, Pay-per-use, and Automation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Elasticity?

A

The ability to dynamically adjust resources based on current workload, scaling up or down.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

True or False - Elasticity in a cloud is preferred but ultimately optional.

A

False! A cloud should ALWAYS have an elastic infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the layers of Azure Architecture?

A

Geographies
Region Pairs
Regions
Availability Zones
Data centers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is Azure Geography?

A

Top layer of Azure Architecture. This is usually a country.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is a Region Pair?

A

Contained within Azure Geographies. Consists of two regions grouped together.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is a Region?

A

A single part within an Azure Geography.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are Availability Zones?

A

Areas within a region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is a Datacenter?

A

Physical building within an Availability Zone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is a Subscription?

A

A unit of consolidated billing. Managed by a Management Group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is a Management Group?
Manages Subscriptions and controls access, policies, and compliance.
26
What is a Resource Group?
A container that holds related resources like Virtual Machines, WebApps, and Databases. Held within a subscription.
27
What are Resources in Azure?
End objects in Azure hierarchy. They are things like Compute, Network, and Storage applications.
28
What is Microsoft Entra ID (Azure AD)?
Azure’s cloud-based Identity and Access Management (IAM) service.
29
What are two factors that affect Azure costs?
Resources usage and Resource location.
30
What are Resources Tags used for in Azure?
Grouping billing data and categorizing costs by runtime environment.
31
What is Azure Total Cost of Ownership Calculator (TCO)?
Helps you estimate cost savings and benefits of migrating on-premises infrastructure and workloads to Azure.
32
What is the difference between Azure Cost Management + Billing and Azure TCO Calculator?
Azure Cost Management + Billing - Provides tools for managing and optimizing the cost of workloads. Azure TCO - Helps estimate the costs of migrating on-premises to cloud.
33
What are Cloud native users?
Users that are created in Entra ID.
34
What are Non-Native users?
Users synced from Entra Connect.
35
What is Entra ID Domain Services?
Designed for applications that require traditional directory server services. Only used by legacy applications.
36
What is the difference between Entra B2B and Entra B2C?
B2B (Business to Business) - Focuses on secure collaboration and resource sharing between businesses. B2C (Business to Customer) - Handles customer-facing identity management.
37
What is a Zero Trust Approach?
A security framework that shifts from traditional perimeter-based security models to a 'never trust, always verify' principle.
38
What are 3 guiding principles of Zero Trust?
Verify explicitly - Always verify the authenticity of a request using multiple data points, not just credentials. Least privilege - Always assign the least amount of permissions necessary for the user to perform the functions of their job. Assume breach - always assume anyone who is here is someone wanting to cause a breach.
39
What is the Defense in Depth Model?
A strategy utilizing multiple layers of protection to secure services and data.
40
What are 3 key things that Defense in Depth is designed to protect?
Confidentiality Integrity Availability ## Footnote (CIA)
41
What is Entra ID Conditional Access?
Provides smart authentication using multiple data points (signals) to verify the authenticity of a request.
42
What is Role Based Access Control (RBAC)?
Assigning permissions based on a user’s role within the company.
43
What are the 3 parts to Role Based Access Control?
Security principle - what should have permissions granted. Role definition - Read, write, etc. Scope - scope to which the access will apply.
44
What are Deny assignments?
Explicitly list permissions not allowed in Azure Role Based Access Control (RBAC).
45
What are Role Assignments?
Attach role definitions to security principles in Azure.
46
What is Microsoft Defender for Cloud?
A comprehensive security solution that provides threat protection and security management for cloud workloads and services.
47
What is a Virtual Machine?
A virtualized version of a physical computer that runs on an elastic infrastructure pool.
48
What is the purpose of Virtual Machine Availability Sets?
To prevent disasters by distributing VM instances across multiple server racks.
49
What are the two orchestration modes for Scale Sets?
Uniform (identical VMs) and Flexible (similar but not necessarily identical VMs).
50
What is Azure Virtual Desktop used for?
Centralized administration of users' apps and data, enabling remote desktop access.
51
What is an Azure Container Instance?
A lightweight and faster way to deploy cloud applications using a containerization engine.
52
What is the benefit of Azure Functions?
On-demand serverless compute for small code blocks, provisioning dependencies at runtime.
53
What does Azure OpenAI provide access to?
OpenAI's large language models, including GPT 3.5, GPT 4, Codex, DALL-E, and Whisper.
54
What is the difference between stateful and stateless applications?
Stateful applications retain data over time, while stateless applications do not store persistent data.
55
What does a Storage Account hold?
Data services for applications, including Blobs, Queues, Tables, and Files.
56
What are the two types of storage accounts?
Standard General Purpose (HDD) and Premium (SSD).
57
What is the purpose of Blobs in Azure Storage?
Blobs store large chunks of unstructured data like videos, audio files, and executables.
58
What is the function of Azure Queues?
They help process requests in order and provide asynchronous messaging between application components.
59
What is the difference between Hot, Cool, and Archive access tiers in blob storage?
Hot is frequently accessed with high storage cost and low access cost, Cool is less accessed with lower storage cost and higher access cost, Archive has the lowest storage cost but the highest access cost.
60
What does Azure File Sync do?
Synchronizes on-prem file shares with Azure Files and enables access across different sites.
61
What are the different storage redundancy options available in Azure?
LRS (Locally Redundant Storage), ZRS (Zone Redundant Storage), GRS (Geo-Redundant Storage), RA-GRS (Read-Only GRS), GZRS (Geo-Zone Redundant Storage), and RA-GZRS (Read-Only GZRS).
62
What are the two main data management tools in Azure?
AZCopy (command-line utility) and Storage Explorer (GUI for managing storage).
63
What is the purpose of Azure Migrate Hub?
Provides resources for assessing and migrating workloads, including Discovery and Assessment Tools, Migration Tools, and Data Migration Assistance.
64
What is a Virtual Network (VNet)?
A virtualized network provisioned from an elastic infrastructure pool to connect cloud resources, the internet, and on-prem environments.
65
What does Virtual Subnet segmentation help with?
Easier administration, load balancing, security filtering, and traffic monitoring using network appliances.
66
What is Virtual Network Peering used for?
To connect two VNets, either in the same region (Local Peering) or different regions (Global Peering).
67
What is the purpose of Service Endpoints?
To create a dedicated path for reaching a resource, eliminating the need for public IPs.
68
How does ExpressRoute work?
Establishes a private connection between on-prem and cloud using unique IP ranges and BGP route propagation.
69
What is a Virtual Network Gateway?
An entry point for external network traffic into VNets, encrypting data transfer between on-prem and cloud.
70
What does Azure DNS do?
Provides name resolution for resources, supporting public and private domains.
71
What is Microsoft Entra ID?
A global Identity as a Service (IDaaS) that provides Identity and Access Management (IAM) for the modern cloud-based world. Formerly known as Azure AD.
72
What are the key functions of Microsoft Entra ID?
Manages authentication and authorization, integrates with Windows Server AD using Entra Connect, and enables security using AI and machine learning.
73
What are the three key pillars of any IT environment?
Users, Devices, and Applications.
74
What are Cloud-native users in Entra ID?
Users created directly in Entra ID, as opposed to non-native users who are synced from an on-prem AD server.
75
What authentication protocols does Entra ID support?
OAuth, SAML, OpenID, and WS-Federation for modern applications.
76
What is Entra ID Domain Services used for?
Supports legacy applications that require traditional directory server functions, including Kerberos, NTLM, and LDAP.
77
What is Entra ID B2B used for?
Enables collaboration between different organizations while managing local authorization within the Entra tenant.
78
What is Entra ID B2C used for?
Allows businesses to provide authentication services for individual consumers using self-service lifecycle management.
79
What is Multifactor Authentication (MFA)?
A security feature requiring two or more authentication factors, such as passwords, security tokens, or biometric data.
80
What is Password-less Authentication?
Authentication without passwords, relying on attributes like security keys, biometrics, and device-based authentication.
81
What is Single Sign-On (SSO)?
A system that allows a user to sign in once and access multiple apps and resources using an authorization token.
82
What is Azure Resource Manager (ARM)?
A service that provides a unified management experience across Azure tools and services, ensuring standardized and secure interactions.
83
What are some management tools used with ARM?
Azure Portal, PowerShell, CLI, and various client-based tools.
84
What is an ARM template?
A JSON-based configuration file that defines Azure resources for consistent deployment.
85
How does Azure Bicep enhance infrastructure management?
It provides a simplified syntax for ARM templates, making infrastructure as code (IaC) easier to write and maintain.
86
What is Azure PowerShell used for?
A cross-platform scripting tool for managing Azure resources using Verb-Noun cmdlets.
87
What is the difference between a Parameter and a Switch in PowerShell?
A Parameter requires a value to be specified, while a Switch does not.
88
What is Azure CLI?
A cross-platform scripting module that interacts with Azure services using `az noun verb` syntax.
89
What are the benefits of using Azure Cloud Shell?
Provides a cloud-based scripting environment accessible from a browser, eliminating the need to install local tools.
90
What is Azure Arc used for?
Extends Azure's management capabilities to on-prem and multi-cloud environments, creating a 'projection' of non-Azure resources.
91
How does Azure Arc communicate with external resources?
By installing an agent or running a script that sends a heartbeat to Azure every 5 minutes.
92
What is Azure Monitor?
A comprehensive monitoring solution for Azure, on-prem, and multi-cloud environments that collects, analyzes, and responds to data.
93
What is Azure Advisor?
A personalized cloud consultant that provides recommendations in reliability, security, performance, operational excellence, and cost optimization.
94
What can you do with the Azure Mobile App?
Manage Azure resources, receive notifications, execute cloud commands, and monitor health status on the go.
95
What is Azure Service Health?
A service that provides transparency into Azure's operational status, including platform events, advisories, and maintenance updates.

AZ900 (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions