Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Azure Master > Introduction > Flashcards

Introduction Flashcards

(91 cards)

Start Studying
1
Q

What ARM stand for?

A

Azure Resource Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What RBAC stand for?

A

Role-based Access Control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Two deployments models in Azure

A
  • ASM - Azure Service Model (old)

- ARM - Azure Resource Model (new)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Can resources be provisioned on different Azure regions and belong to the same resource group?

A

YES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Does every resource need to be a part of resource group?

A

YES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is Idempotent feature?

A

Ensures predictability, standarization and consistency in resource deployment by ensuring that every deployment will result in the same state of resources and configuration, no matter the number of times it is executed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What technology is Azure running on?

A

Azure runs on a customized version of Hyper-V. It’s fairly close to Hyper-V core in construct or theory, but that’s where all the similarities end.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Four ways to interact with Azure

A
  • Azure Portal
  • PowerShell
  • CLI
  • REST API
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Feature to ensure that applications are still available even when a data center goes down.

A

Availability zones.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Feature to provide provide redundancy at a data center level, similar to locally redundant storage

A

Availability sets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Azure fault domain?

A

A fault domain is a logical group of underlying hardware that share a common power source and network switch, similar to a rack within an on-premises datacenter. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these fault domains.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is availability set?

A

An Availability Set is a logical grouping capability for isolating VM resources from each other when they’re deployed. Azure makes sure that the VMs you place within an Availability Set run across multiple physical servers, compute racks, storage units, and network switches.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Azure update domain?

A

An update domain is a logical group of underlying hardware that can undergo maintenance or be rebooted at the same time. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these update domains.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Azure Availability Zones?

A

Availability Zones is a high-availability offering that protects your applications and data from datacenter failures. Availability Zones are unique physical locations within an Azure region. Each zone is made up of one or more datacenters equipped with independent power, cooling, and networking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Two Azure features for load balacing?

A
  • Load Balacers (layer 4)

- Application Gateways (layer 7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Cookie-based session affinity?

A

Feature in Application Gateway feature in which all subsequent requests following the first request should be processed by the same service instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is Secure Sockets Layer (SSL) offload?

A

SSL offload helps in transferring cryptography processing from the web server to the load balancer, thereby providing more resources to web servers serving users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is End-to-end SSL?

A

Application Gateway feature which allows mission-critical secure applications that need complete SSL encryption and decryption even if traffic passes through load balancers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is URL-based content routing?

A

Application gateway traffic redirection based on the URL content of incoming requests.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Packet fields used for load balancing in Azure?

A
  • Originating IP address
  • Target IP address
  • Originating port number
  • Target port number
  • Type of the protocol (TCP, HTTP, etc.)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is Azure Traffic Manager?

A

Traffic Manager helps us to create highly available solutions that span multiple geographies, regions, and data centers. It uses DNS to redirect requests to an appropriate endpoint .

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is VM scale sets (VMSS)

A

Azure compute resource that you can use to deploy and manage a set of identical VMs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is max number of VM in VMSS (VM Scale Sets)

A
  • 1,000 VMs when using a platform images

- 100 VMs if using a custom image

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How Authentication is performed in Azure?

A

OpenID Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
How Authorisation is performed in Azure?
OAuth
26
What Integrity mean?
Integrity ensures that the payload and message exchange between sender and receiver is not tampered with.
27
What NSG stand for?
Network Security Group
28
What OMS stand for?
Operations Management Suite
29
Four services of Azure Storage Account
- blob - files - queues - tables
30
What is shared access signature (SAS)?
URI that grants restricted access rights to Azure storage services: blob, files, queues, and tables
31
What TDE stand for?
Transparent Data Encryption - the technology used by SQL Server for encrypting data at rest.
32
What DDM stand for?
Dynamic Data Masking - masking certain types of data, such as credit cards or user PII data
33
Is Azure Key Vault per region or globally deployed?
per region
34
Two important security resources to manage all security aspects of the Azure subscription, resource groups, and resources?
- Azure Monitor | - Azure Security Center
35
Default maximum number of storage accounts per subscription?
200
36
Max size of file share
5TB
37
Two types of disks in Azure
- Managed | - Unmanaged
38
Linux encryption method in Azure?
DM-Crypt
39
Within an Azure Resource Manager (ARM) template, what three elements are required in a JSON template?
$schema, contentVersion and resources
40
Within an Azure Resource Manager (ARM) template, what statement describes the purpose of the $schema element?
The $schema element specifies the location of the JSON schema file.
41
What is Azure Resource Manager's (ARM) default template deployment mode?
Incremental mode
42
In Azure Resource Manager (ARM) templates what advantage do variables provide?
Variables simplify template expressions.
43
Two types of Queues in Azure
- Azure Storage Queues | - Azure Service Bus Queues
44
Which Azure-managed storage encryption feature encrypts data within an Azure Storage account, and decrypts it on read without requiring key management or additional configuration steps?
Server-Side Encryption for Data at Rest
45
Which encryption method applies to Azure blobs only?
Storage Service Encryption
46
Which blob type is the most suitable for logging scenarios?
Append blob
47
What is one reason to use a Shared Access Signature instead of an account key?
To provide access to a client that can't be trusted with the account key
48
Which blob type is optimized for IaaS virtual machines?
Page blob
49
Two tiers of application gateway?
- standard | - WAF (web application firewall)
50
DNS level load balancing
Traffic Manager
51
Application Level load balancing
Application Gateway
52
Traffic Manager load balancing modes.
- weighted - priority - performance
53
What is global vnet peering?
Virtual Network Peering for vnets in different regions
54
How to disable default routing to the public Internet?
User-defined route to override the default
55
What is PHS?
Password Hash Synchornization - sign in method used as a part of hybrid identity solution
56
What is PTA?
Pass-Through Authentication - allows users to sign in to both on-prem and cloud-based app with the same password.
57
What is Federation?
Collection of domains with an established trust, which typically includes authentication and almost always authorisation.
58
Which Microsoft Azure Site Recovery (ASR) component is responsible for the replication during a failover from Azure?
Master target server
59
Which feature enable developers with the ability to perform A/B testing on Azure App Service apps, and provides you a separate deployment environment along with the default production environment?
Deployment Slots
60
Within Azure Batch, what is a batch job?
A collection of tasks
61
How is a Batch pool created in Azure Batch?
Manually by the user or automatically by the Batch service when the job is specified
62
What is Azure Logic App?
An offering that provides the developer with visual designer that can be used to model and automate workflows.
63
Four Components of Azure Storage Account?
- Blob - Table - Queue - File
64
What is a shared access signature (SAS)
URI that grants restricted access rights to Azure Storage resources
65
Three authorization techniques in Azure
- Access Keys - Shared access Signatures - Azure Active Directory
66
How many copies are created in case of Locally-redundant storage?
3
67
Zone-redundant storage protection
Helps to protect against data center level failures
68
Geo-redundant storage protection
Helps to protect against region failures
69
Does VM restart cause data on temporary disk loss?
No
70
Does VM STOP cause data on temporary disk loss?
Yes
71
Does VM restart cause public IP reallocation?
No
72
Does VM STOP cause public IP reallocation?
Yes
73
Which resources can have NSG attached?
- subnet | - NIC
74
Can VNET peering be enabled across regions?
YES
75
Can VNET peering be enabled across subscriptions?
YES
76
What is Azure Resource Manager?
Azure Resource Manager (ARM) is the native platform for infrastructure as code (IaC) in Azure.
77
Four sections of Azure Resource Manager Template
- Resources - Variables - Parameters - Outputs
78
Three types of snapshots in Azure
- Application consistent - File-system consistent - Crash consistent
79
Describe application-consistent snapshot
backup service captures the memory content, pending I/O operations
80
Describe file-system snapshot
backup service takes a snapshot of all the files at the same time
81
Describe crash-consistent snapshot
this happens if the virtual machine shuts down at the time of the backup process
82
What's required to attach additional NIC to an Azure VM
Stop the Azure VM you want to attach an additional NIC
83
Is VPN gateway highly available?
Yes, Each VPN gateway has two instances, one in active and one in standby.
84
What is Password Hash Synchornization?
Azure AD Connect synchronizes a hash of a hash, of user's password from an on-premises AD instance to a cloud-based Azure AD instance
85
What is Pass-through authentication?
similar to password hash synchronization, but here the users' passwords is directly validated against the on-premise AD. This allows organizations to enforce their on-premise AD security and password policies
86
Azure Load Balancer 3 SKUs
- Basic - Standard - Gateway
87
What is Azure Application Gateway?
Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. OSI layer 7
88
Is dedicated subnet required for the application gateway?
YES
89
What is Azure Front Door?
Azure Front Door is a global, scalable entry-point that uses the Microsoft global edge network to create fast, secure, and widely scalable web applications. Front Door works at Layer 7 (HTTP/HTTPS layer) using anycast protocol with split TCP and Microsoft's global network to improve global connectivity.
90
What is the mandatory subnet name for Azure firewall?
AzureFirewallSubnet
91
What are Azure Blueprints?
Helps to define a repeatable set of processes that can adhere to an organization's standards and patterns.

Azure Master (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions