Configuring Azure Subscriptions Flashcards
True or False:
Planned system updates get rolled out to paired regions at the same time.
False
Planned system updates get rolled out to paired regions in a sequential fashion to minimize disruption to customer applications and solutions.
Azure tries to maintain at least ___________ miles of separation between datacenters to mitigate the chances of a disaster affecting both regions at once.
300
What term refers to a specific geographical location that contains at least one datacenter?
A region
What is a Regional Pair?
Two Azure regions which are paired together within the same geography.
examples:
Asia: East Asia / Southeast Asia
North America: East US / West US
What is the purpose for Region Pairs?
Region pairs protect against broad outages like natural disasters, civil unrest, power outages, or physical network outages.
What do you need in order to receive authenticated and authorized access to Azure products and services?
An Azure Subscription
Describe “Azure Subscription”
Logical unit of Azure services that links to an Azure account, which is an identity in Azure AD or in a directory that Azure AD trusts.
What is a billing boundary?
Determines how an Azure account is billed for using Azure. A separate invoice is generated for each subscription.
Describe the use of a subscription as an access control boundary?
Azure applies access-management policies at the subscription level. You can create separate subscriptions to reflect different structures. Example: Different departments can have their own subscriptions.
Explain what a management group is.
Management groups provide a level of scope and control that sits above the subscription level, and they are typically used as containers to manage access, policy, and compliance across multiple subscriptions.
All subscriptions within a management group will automatically inherit conditions that are applied to that management group.
What does Azure Policy Do?
Azure Policy allows you to create, assign, and manage policies that are used to enforce rules on resources.
It runs real-time and on-demand evaluations and scans against those resources to make sure they’re compliant.
True or False:
Azure policy can specify which resources can and cannot be deployed.
True
What is a policy definition?
Policy definitions refer to the compliance conditions for a resource, and the actions that should be taken when the conditions of the policy are met.
What is an initiative definition?
Initiative definitions are groups of policy definitions, used to control the scope of your policies and to evaluate the compliance of your resources.
Example: Audit machines with insecure password security settings allows you to deploy an audit policy that evaluates affected resources to check for insecure password security settings.
What are policies used for?
used to define conventions for resources.
