Compute Flashcards

1
Q

What is Azure Key Vault?

A

A service that safeguards encryption keys and secrets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does an access policy in an Azure Key Vault define?

A

What operations can be done on the secrets and who can perform these operations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is best practice for storing passwords in ARM templates?

A

Using Azure Key Vault with an access policy, so it is not stored in plaintext

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What does a custom script extension do?

A
  • Downloads and executes scripts on Azure VMs
  • Useful for configuration/management tasks like software installation
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How would you apply a custom script extension in an ARM template?

A

Modify the extension Profile portion of the template

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the steps involved in setting up Azure Automation State Configuration to manage VM configs?

A

Step 1: Create and upload a configuration to Azure Automation
Step 2: Compile a configuration into a node configuration
Step 3: Register a VM to be managed by State Configuration
Step 4: Specify configuration mode settings
Step 5: Assign a node configuration to a managed node
Step 6: Check the compliance status of a managed node

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Why and when would you use a spot VM instance?

A

Ideal for workloads that can be interrupted, providing scalability while reducing costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is SKU?

A
  • Stock Keeping Unit
  • A specific version or offering of a resource that is available in Azure
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the Compute Gallery used for?

A

Enabled versioning and replication of images and apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What’s the difference between uniform and flexible VMSS?

A
  • In uniform and flexible VMSS, you define a template and capacity
  • Flexible VMSS additionally supports auto-scale, adding other VMs, and full control over VMs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a benefit of using a container over a VM?

A

Less resources consumed
Smaller size
Faster startup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In Azure CLI, what command would you use to apply your YAML manifests in an AKS cluster?

A

kubectl apply -f <filename>.yaml</filename>

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

In Azure CLI, what command is used for AKS cluster configuration?

A

az aks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How would you move a VM to another network?

A
  • Delete VM
  • Recreate VM and add network interface
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What OS can ASP.NET apps run on?

A

Windows only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What OS can ASP.NET Core apps run on?

A

Windows and Linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

To run an App, what must be true about the associated App Service plan?

A

Must be in same region the app is running in
Must have a compatible OS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Why might you be unable to create a staging slot?

A
  • Your app may be running in too low a tier
  • Scale up to Standard, Premium, or Isolated to enable multiple deployment slots
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

During Azure planned maintenance, what is the maximum percentage of machines in a VMSS that will upgrade at any time?

A

20%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What could you do if you wanted to move your VM so it wouldn’t be affected by a planned maintenance?

A

Redeploy the VM so it moves to a new node

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How many OS can you have per app service plan?

A

1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How would you add a custom domain name to a web app?

A

Create a DNS record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Can you change the VNet of a VM after creation?

A

No, you can only change the subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is required in order to access applications on Kubernetes?

A

An application Load Balancer created by Azure with a public IP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is the best way to deploy 10 Azure web apps?

A

App Service plan (Standard supports 10 web apps)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What changes to a VM would cause downtime?

A

Resizing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What steps are needed to deploy a web app update after testing?

A
  • Deploy the update to the staging deployment slot
  • Test
  • Swap to the production deployment slot
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is a quicker way to deploy multiple VMs

A

Use ARM template
VMSS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What are the prerequisites for creating a recovery services vault to protect virtual machines?

A

The vault must be in the same region as the VM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is the difference between a container and a VM?

A
  • VMs virtualize an entire machine (hardware)
  • Containers only virtualize software layers above the OS level (software)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

How would you configure cluster autoscaler for AKS nodes?

A

az aks
Scale the nodes in the Azure portal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

How would you configure Horizontal pod autoscaling?

A

kubectl

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are Azure proximity placement groups?

A
  • A logical grouping capability for Azure VMs
  • VMs assigned to a proximity placement group are placed in the same data center, so the VMSS should share the same region
34
Q

What port does DNS use?

A

53

35
Q

What port does HTTP/web server use?

A

80

36
Q

What is the difference between an availability set and an availability zone?

A

Set - Within data center - Configure update and fault domains
Zone - Within region - Protect from data center failures

37
Q

What must you specify when deploying a VM from a template?

A

Resource group
Password

38
Q

What VM property can you modify via scheduled runbook?

A

Size

39
Q

What extensions can you use to ensure a particular service offering is available on all deployed VMs?

A
  • Custom script extension
  • DSC extension
40
Q

Where do containers live?

A

Inside pods

41
Q

What does the service CIDR assign IP addresses for?

A

Internal services in the AKS cluster

42
Q

For Windows Server, what is the temporary disk?

A

D:\

43
Q

What type of disk does Azure support for migration from on-premises to Azure?

A

VHD file format with a fixed size disk

44
Q

What is the advantage of using deployment slots?

A

You can validate app changes in a staging deployment slot before swapping to production

45
Q

What are your options for restoring a VM?

A

Create new
Replace existing

46
Q

What is a requirement for Azure Backup to work correctly?

A

The latest version of the Azure VM Agent

47
Q

What is the maximum number of update domains you can have?

A

20

48
Q

What is the maximum number of fault domains you can have?

A

3 for most regions

49
Q

How many app service plans can you have per region?

A

10 free, 100 premium

50
Q

What command allows you to use a custom ARM template file to deploy resources to a RG?

A

New-AzResourceGroupDeployment

51
Q

What does Microsoft Azure Recovery Services Agent (MARS) do?

A

Restore data for entire volume or just individual folders and files

52
Q

Why would you add a copy loop to the resource section of your template?

A
  • So you can dynamically set the number of items for a property during deployment
  • Copy - copyindex
53
Q

What do you need to connect a VM to different subnets?

A
  • Multiple NICS
  • Each NIC attached to a VM must exist in the same location and subscription as the VM
54
Q

What’s the difference between New-AzResource and New-AzResourceGroupDeployment?

A
  • New-AzResource creates an Azure resource in a RG
  • New-AzResourceGroupDeployment adds a deployment to an existing RG
55
Q

What do you backup an app service to?

A

An Azure storage account

56
Q

What can you backup with a Recovery service vault?

A

VMs
File Shares

57
Q

What types of storage can you backup in a Backup vault?

A

Azure disks
Azure blobs

58
Q

When backing up an app service, how do you exclude folders/files from being stored in future backups?

A

Create a _backup.filter file

59
Q

What “type”: command is needed to install an extension on a VM when deploying an ARM template?

A

Microsoft.Compute/virtualMachines/extensions

60
Q

What is required to run an AKS cluster that supports node pools for Windows Server containers?

A

A network policy that uses Azure CNI (advanced) network plugin

61
Q

What must be enabled if you want to integrate an AKS cluster with an Azure container registry?

A

AKS-managed Azure Active Directory setting

62
Q

When configuring AKS clusters, when would you use the “max surge” command?

A

Extra nodes used to speed up upgrade

63
Q

What deployment modes are available when using ARM templates?

A

Complete
Incremental

64
Q

What does deploying an ARM template in complete mode do?

A

Resource Manager deletes resources that exist in the RG but are not specified in the template

65
Q

What does deploying an ARM template in incremental mode do?

A

Resource Manager leaves unchanged resources that exist in the resource group but are not specified in the template

66
Q

What does the Cooldown parameter define when configuring autoscaling?

A

How much time has to pass before the next autoscale operation triggers

67
Q

What OS supports multi-container groups?

A

Linux only

68
Q

What IP address does Azure Firewall support?

A

Standard SKU public IPv4 addresses

69
Q

What does ImageReference specify in an ARM template?

A

Which image to use, whether it be a platform, marketplace, or VM image

70
Q

What kind of record does Azure use to verify a custom domain?

A

CNAME or TXT

71
Q

For Azure App Services, why might you need to use a Standard plan over a Basic plan?

A
  • If you need 4-10 instances
  • Standard supports up to 10, basic supports up to 3
72
Q

For web apps, what runtime stacks are ONLY supported by Windows?

A

ASP.NET

73
Q

For web apps, what runtime stacks are ONLY supported by Linux?

A

Python

74
Q

What OS does Azure Container Apps support?

A

Linux only

75
Q

At what level would you deploy a template that creates a RG?

A

Subscription

76
Q

What does virtual network integration do for your app?

A
  • Gives your app access to resources in your VNet
  • Used only to make outbound calls from your app into your VNet
77
Q

How would you sign in as an admin user into a container registry?

A

Username: Name of container registry
Password: Admin user access key

78
Q

What is required to ensure a VM can be created in an Availability Zone?

A
  • VM should use managed disks if you want to move them to an Availability Zone using Site Recovery
  • You should select a zone in the High Availability section during VM creation
79
Q

Does the location of a RG influence the choice of the location of a VM?

A

No

80
Q

Can you restore a test slot from a production slot backup?

A

No