Azure Fundamentals

Question 1

What is the purpose of defense in depth?

Answer 1

The objective of defense in depth is to use several layers of protection to prevent information from being accessed or stolen by unauthorized users.

Question 2

What is conditional access?

Answer 2

Conditional Access is a tool that Microsoft Entra uses to allow or deny access to resources based on identity signals.

Question 3

What is Microsoft Entra?

Answer 3

Microsoft Entra supports the registration of devices.

Question 4

What is SSO?

Answer 4

SSO enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

Question 5

What is Azure RBAC?

Answer 5

Azure RBAC allows you to assign a set of permissions to a user or group.

Question 6

What are resource tags?

Answer 6

Resource tags are used to locate and act on resources associated with specific workloads, environments, business units, and owners.

Question 7

What are resource locks?

Answer 7

Resource locks prevent the accidental change or deletion of a resource.

Question 8

What is Azure Key Vault?

Answer 8

Key Vault is a centralized cloud service for storing an application secrets in a single, central location.

Question 9

Where is Azure RBAC applied?

Answer 9

An Azure RBAC role is applied to a scope, which is a resource or set of resources that the access applies to.

Question 10

Which two services are provided by Microsoft Entra?

Answer 10

Authentication, SSO

Question 11

You need to compare the costs of running an application in an on-premises datacenter with the costs of running the application in Azure.

What should you use to assist you?

Answer 11

The TCO Calculator helps you estimate the cost savings over time of operating a solution in Azure compared to operating in an on-premises datacenter.

Question 12

What is Azure Pricing Calculator?

Answer 12

The Azure Pricing calculator allows you to estimate and configure according to your specific requirements. You will then receive a consolidated estimated price and a detailed breakdown of the costs associated with each resource you added to your solution.

Question 13

Which two features are available by using Azure Cost Management + Billing?

Answer 13

Azure Cost Management allows you to create and manage cost and usage budgets by monitoring resource demand trends, consumption rates, and cost patterns. It also allows you to use historical data to generate reports and forecast future usage and expenditures.

Question 14

Azure Policy

Answer 14

Azure Policy can help to create a policy for allowed regions, which enables you to restrict the deployment of virtual machines to a specific location.

Azure Policy enables you to define both individual policies and groups of related policies called initiatives. Azure Policy evaluates your resources and highlights resources that are not compliant with the policies you created. Azure Policy can also prevent noncompliant resources from being created.

Question 15

Azure Portal

Answer 15

The Azure portal provides a GUI to view all the services you are using, create new services, configure your services, and view reports.

Question 16

What can you use to define the resources you want to provision in a declarative JSON format?

Answer 16

By using ARM templates, you can describe the resources you want to use in a declarative JSON format.

Question 17

Azure Advisor

Answer 17

Azure Advisor analyzes the account usage and makes recommendations based on its set and configured rules.

Question 18

Azure CLI

Answer 18

Azure CLI allows you to use the Bash shell to perform administrative tasks. Bash is used in Linux environments, so a Linux administrator will probably be more comfortable performing command-line administration from Azure CLI.

Question 19

Azure Application Insights

Answer 19

Application Insights is a feature of Azure Monitor that allows you to monitor running applications, automatically detect performance anomalies, and use built-in analytics tools to see what users do on an app.

Question 20

Azure Service Health

Answer 20

Service Health notifies you of Azure-related service issues, such as region-wide downtime.

Question 21

Data Catalog

Answer 21

This enables data discovery

Question 22

Data Sharing

Answer 22

This shares data within and between organizations

Question 23

Data Estate Insights

Answer 23

This accesses data estate health

Question 24

Data Policy

Answer 24

This governs access to data

Question 25

Azure Resource Manager (ARM)

Answer 25

ARM is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in an Azure account.

Question 26

Application Insights (Azure Monitor)

Answer 26

Application Insights is a feature of Azure Monitor that allows you to monitor running applications, automatically detect performance anomalies, and use built-in analytics tools to see what users do on an app.