Azure Fundamentals Training Day Flashcards

(83 cards)

1
Q

Regions

A

Made up of one or more datacenters in close proximity for hosting Azure services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Agility

A

Deploying and configuring cloud-based resources quickly as business requirements change

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Availability Zones

A

Physically separate datacenters within the same region
Provide protection against downtime due to datacenter failure
Each datacenter is equipped with independent power, cooling, and networking
Connected through private fiber-optic networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Region Pairs

A

Allow the replication of Azure resources across geographies to help ensure that a secondary region is available in case of any disaster at the primary region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Azure Sovereign Regions

A

Separate instance of Azure, physically isolated from non-US government deployments
Accessible only to screened, authorized personnel
Meets the security and compliance needs of US federal agencies, state and local government

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Azure China

A

All data stays within China to ensure compliance
Physically separated instance of Azure cloud services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

___ can only be associated with a single subscription

A

Resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Resource Group

A

Logical container used to combine and organize Azure resources
Resources can only exist in one resource group
Resources can exist in different regions
Resources can be moved to different resource groups
Applications can utilize multiple resource groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is an Azure Storage account named storage001 an example of?

A

A resource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Azure Subscription

A

Provides you with authenticated and authorized access to Azure accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Billing Boundary

A

Generate separate billing reports and invoices for each subscription

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Access Control Boundary

A

Manage and control access to the resources that users can provision with specific subscriptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Management Groups

A

Used to manage multiple Azure subscriptions at scale, including their access, policies, and compliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

VM Scale Sets

A

Provide a load-balanced opportunity to automatically scale resources; scale out when resource needs increase, scale in when needs are lower

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

VM Availability Sets

A

Groups VMs into three domains so that if power or network fails in one domain, VMs are still available from another domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Azure Container Instances

A

Allows you to deploy containers in Azure without having to provision or manage any underlying infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Azure Container Apps

A

Fully managed serverless container service for building and deploying modern apps at scale

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Azure Kubernetes Service

A

An orchestration service for containers with distributed architectures and large volumes of containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Azure Functions

A

PaaS offering that supports serverless compute operations. Event-based code runs when called without requiring server infrastructure during inactive periods

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Azure App Services

A

Fully managed platform to build, deploy, and scale web apps and APIs quickly.
Works with .NET, .NET Core, Node.js, Java, Python, or php

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Azure Virtual Network (VNet)

A

Enables Azure resources to communicate with each other, the internet, and on-premises networks
Can be used for public or private access, virtual subnets, or network peering to connect private networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

ExpressRoute

A

Extends on-prem networks into Azure over a private connection that is facilitated by a connectivity provider

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Azure DNS

A

Host and manage DNS domains or DNS zones through Azure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Storage Accounts

A

Must have a globally unique name
Provides over-the-internet access worldwide
Determine storage and redundancy options

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
LRS
Locally redundant storage Single datacenter in primary region 11 nines durability
26
ZRS
Zone redundant storage Three availability zones in the primary region 12 nines durability
27
GRS
Geo redundant storage Single datacenter in the primary and secondary region 16 nines durability
28
GZRS
Geo zone redundant storage Three availability zones in the primary region and a single datacenter in the secondary region 16 nines durability
29
Azure Blob
Optimized for storing massive amounts of unstructured data, such as text or binary data
30
Azure Disk
Provides disks for VMs, applications, and other services to access and use
31
Azure Queue
Message storage service that provides storage and retrieval for large amounts of messages, each up to 64KB Commonly used to create a backlog of work to be accessed asynchronously
32
Azure Files
Sets up a highly available network file share that can be accessed using the SMB protocol
33
Azure Tables
Provides a key/attribute option for structured non-relational data storage with a schema-less design
34
Azure storage tier optimized for frequently accessed data
Hot
35
Azure storage tier optimized for storing data accessed infrequently and stored for at least 30 days
Cool
36
Azure storage tier optimized for storing data accessed infrequently and stored for at least 90 days
Cold
37
Azure storage tier optimized for storing data accessed rarely and stored for at least 180 days with flexible latency requirements
Archive
38
Early removal of data from access tiers with storage requirements will result in ____
Fees
39
Azure Migrate
Unified migration platform with a range of integrated and standalone tools. Performs assessment and migration of on prem datacenters to Azure
40
Azure Data Box
Store up to 80 TB of data to move disaster recovery backups to Azure. Protects data in a rugged case during transit. Migrate data out of Azure for Compliance or regulatory needs Migrate data to Azure from remote locations with limited or no connectivity
41
AzCopy
Command line utility Copy blobs or files to or from your storage account One-direction synchronization
42
Azure Storage Explorer
GUI compatible with Windows, MacOS, and Linux. Uses AzCopy to handle file operations
43
Azure File Sync
Synchronizes Azure and on-prem Windows File Server in a bi-directional manner. Cloud tiering keeps frequently accessed files local, while freeing up space Rapid reprovisioning of failed local server (install and resync)
44
Microsoft Entra ID
Azure's cloud-based identity and access management service. Handles: Authentication SSO Application management Business to Business Device management
45
Microsoft Entra Domain Services
Cloud based domain services without managing domain controllers Run legacy applications (that can't use modern auth standards) in the cloud Automatically sync from Microsoft Entra ID
46
Microsoft Entra External ID B2B
A method to securely grant access to your resources with external partners, vendors, suppliers, or other collaborators.
47
External Identities B2C
Allows customers/consumers of your app to sign up and sign in to utilize it Automatically reacts to DoS and password spraying activities
48
Conditional Access
Used to bring signals together, to make decisions, and enforce organizational policies. Based on: User or Group Membership IP Location Device Application Risk Detection
49
Azure RBAC
Role Based Access Control - applied to a scope (resource or set of resources the access applies to) Enforces principle of least privilege by granting permissions that are appropriate for user's role, nothing more
50
How many pre-built RBAC roles are available in Azure?
70
51
Owner Role
Grants full access to manage all resources, including the ability to assign roles in Azure RBAC
52
Contributor Role
Grants full access to manage all resources, but does not allow role assignment in RBAC
53
Reader Role
View all resources, but does not allow you to make any changes
54
RBAC Administrator
Manage user access to Azure resources Assign roles in RBAC Assign themselves or others the Owner role Can't manage access using other ways, such as Azure Policy
55
User Access Administrator
Manage user access to Azure resources
56
Microsoft Defender for Cloud
Monitoring service that provides threat protection across both Azure and on-prem datacenters Provides security recommendations Detect and block malware Analyze and identify potential attacks Just-in-time access control for ports
57
Azure Security Benchmark
Defender for Cloud feature that compares your environment to security best practices and makes recommendations to enhance security Based on widely accepted compliance frameworks
58
Factors Affecting Cost
Resource-Specific Costs Consumption - pay-as-you-go Maintenance- monitoring Azure footprint and mitigating costs that aren't necessary Geography- different costs per region Network Traffic- outbound data or data between Azure resources is impacted by billing zones Subscription
59
Azure Marketplace
Allows customers to find, try, purchase, and provision applications and services from hundreds of leading service providers.
60
Pricing Calculator
Tool that helps you estimate the cost of Azure products with configuration options like region, tier, etc
61
TCO Calculator
Total Cost of Ownership Allows prospective Azure customers to calculate cost of migration to Azure
62
Azure Cost Management
Allows you to create and manage cost and usage budgets by monitoring resource demand trends, consumption rates, and cost patterns Also allows you to use historical data to generate reports and forecast future usage and expenditures
63
Tags
Provides metadata for your Azure resources. Offers custom grouping of resources based on tags Logically organizes resources into a taxonomy Consists of a name-value pair (example- owner: joe)
64
Microsoft Purview
Family of data governance, risk, and compliance solutions that helps you get a single, unified view into your data Automated data discovery Sensitive data classification End-to-end data lineage
65
Azure Policy
Azure service that enables you to create, assign, and manage policies that control our audit resources. These policies enforce different rules across all resource configurations so they stay compliant with corporate standards.
66
Resource Locks
Protect your Azure resources from accidental deletion or modification Manage locks at subscription, resource group, or individual resource levels within Azure Portal
67
Service Trust Portal
Publicly accessible website where Microsoft publishes audit reports- "built on a foundation of trust, security, and compliance"
68
Azure Portal
GUI for interacting with Azure
69
Azure Cloud Shell
Web based shell for interaction with Azure resources
70
Azure PowerShell
Uses commandlets to perform administrative tasks on Azure resources
71
CLI
Command Line Interface; similar capabilities as PowerShell for performing administrative tasks on Azure resources, however uses Bash
72
Azure Resource Manager (ARM)
The deployment and management service for Azure that enables you to create, update, and delete resources in your Azure subscription
73
ARM Templates
JSON files that define an application's infrastructure requirements for a repeatable deployment that is done in a consistent manner. A validation step ensures that all resources can be created in the proper order based on dependencies, in parallel, and without being altered
74
Bicep
Language/syntax for ARM template creation
75
Azure Arc
Multi-cloud and on-prem management platform Lets you manage Windows and Linux physical servers and VMs hosted outside of Azure, on your corporate network, or other cloud provider
76
Azure Advisor
Analyzes account usage and makes recommendations based on its set and configured rules Recommendations can help improve reliability, security, and performance, achieve operational excellence, and reduce costs
77
Azure Service Health
Provides details of planned maintenance and service outages, including official incident reports called root cause analysis which can be shared with stakeholders
78
You need to allow resources on two different Azure virtual networks to communicate with each other. What should you configure?
Peering
79
Service Endpoints
Used to expose Azure services to a virtual network, providing communication between the two
80
NSGs
Network Security Groups Allow you to configure inbound and outbound rules for virtual networks and virtual machines
81
Which two services can you use to establish network connectivity between an on-prem network and Azure resources?
Azure VPN Gateway ExpressRoute
82
Application Insights
Feature of Azure Monitor that allows you to monitor running applications, automatically detect performance anomalies, and use built-in analytics tools to see what users do on an app
83
Azure Monitor
Platform for collecting, analyzing, visualizing, and alerting based on metrics. Can log data from an entire Azure and on-prem environment.