Azure Management Groups and Policies
40 Questions
0 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

What is the effect of inheriting a deny policy?

  • It overrides all allowed permissions
  • It is allowed by default
  • It overrides any allowed permissions (correct)
  • It has no effect on existing permissions

    • Where can virtual networks be created?

  • At the root management group
  • At any management group level (correct)
  • Nowhere, virtual networks are not allowed
  • Only at the subscription level

    • What is required to create Virtual Machines on a Management Group?

  • The required RBAC permissions (correct)
  • Owner permissions
  • Contributor permissions
  • No permissions are required

    • Can subscriptions be moved between Management Groups?

    <p>Yes, provided the user has the required RBAC permissions</p> Signup and view all the answers

    What is the effect of the policy in Exhibit?

    <p>You are prevented from creating Azure SQL servers anywhere in Subscription 1</p> Signup and view all the answers

    What is the purpose of Management Groups?

    <p>To organize subscriptions</p> Signup and view all the answers

    What is required to move a subscription between Management Groups?

    <p>The required RBAC permissions</p> Signup and view all the answers

    What is the effect of inheriting an allow policy?

    <p>It overrides any deny policies</p> Signup and view all the answers

    What is the purpose of verifying your custom domain name on the Fabrikam - Custom domain names page?

    <p>To ensure your custom domain is properly registered and valid for Azure AD</p> Signup and view all the answers

    Which of the following record types can be used to verify a custom domain name for Azure AD?

    <p>Both TXT and MX</p> Signup and view all the answers

    What role should you assign to the Developers group to provide them with the ability to create Azure logic apps?

    <p>Logic App Contributor role</p> Signup and view all the answers

    What is the primary function of the DevTest Labs User role?

    <p>Connect, start, restart, and shutdown virtual machines</p> Signup and view all the answers

    What is the purpose of the Azure AD tenant named Adatum?

    <p>To contain a group named Developers</p> Signup and view all the answers

    What is the name of the resource group in Subscription1 that you need to provide the Developers group with access to?

    <p>Dev</p> Signup and view all the answers

    What is the correct sequence of steps to verify a custom domain name for Azure AD?

    <p>Select the custom domain name, then select Verify</p> Signup and view all the answers

    What is the primary goal of providing the Developers group with the ability to create Azure logic apps?

    <p>To manage Azure logic apps</p> Signup and view all the answers

    What is the first step in an import job?

    <p>Attach an external disk to Server1 and then run waimportexport.exe</p> Signup and view all the answers

    What is the purpose of the WAImportExport tool?

    <p>To copy data to disk drives.</p> Signup and view all the answers

    What is required to be provided during job creation?

    <p>Return address and carrier account number for shipping the drives back.</p> Signup and view all the answers

    What happens to the drives after they are received at the Azure data center?

    <p>They are processed and the data is imported to Azure storage.</p> Signup and view all the answers

    What is the purpose of the drive journal files?

    <p>To track the delivery of the drives.</p> Signup and view all the answers

    What is the purpose of Server1 and Server2 in Azure File Sync?

    <p>To register as a server endpoint.</p> Signup and view all the answers

    What is the cloud endpoint of Group1 in Azure File Sync?

    <p>Share1</p> Signup and view all the answers

    What is the server endpoint of Group1 in Azure File Sync?

    <p>D:\Folder1</p> Signup and view all the answers

    Where can a Log Analytics workspace be created in relation to the location and subscription of your vaults?

    <p>In a different location and subscription than your vaults</p> Signup and view all the answers

    What type of storage account is used to host premium file shares?

    <p>FileStorage account</p> Signup and view all the answers

    Which storage accounts can be used to host premium file shares?

    <p>contoso101, contoso102, and contoso103 only</p> Signup and view all the answers

    What is the purpose of the net use command in relation to file shares?

    <p>To connect to file shares</p> Signup and view all the answers

    What access does the IP 193.77.134.1 have on the SAS?

    <p>Will have no access</p> Signup and view all the answers

    What is the purpose of a shared access signature (SAS)?

    <p>To grant temporary access to a file share</p> Signup and view all the answers

    Which storage accounts can be used to host standard file shares?

    <p>Any of the above</p> Signup and view all the answers

    What is the purpose of a Log Analytics workspace?

    <p>To analyze and report on data from Azure resources</p> Signup and view all the answers

    What is a requirement for a sync group in Azure File Sync?

    <p>It must contain one cloud endpoint and one or more server endpoints.</p> Signup and view all the answers

    What is the purpose of a cloud endpoint in Azure File Sync?

    <p>To represent an Azure file share.</p> Signup and view all the answers

    What is the name of the Azure Storage account in the given scenario?

    <p>contosostorage</p> Signup and view all the answers

    What is the UNC path for accessing files from the data file share?

    <p>\contosostorage\file.core.windows.net\data</p> Signup and view all the answers

    What command should you run to create a container named vmimages?

    <p>az storage container create vmimages</p> Signup and view all the answers

    What is the purpose of a server endpoint in Azure File Sync?

    <p>To represent a server or a cluster of servers.</p> Signup and view all the answers

    What is required to create a sync group in Azure File Sync?

    <p>One cloud endpoint and one or more server endpoints.</p> Signup and view all the answers

    What is the name of the file share in the given scenario?

    <p>data</p> Signup and view all the answers

    Study Notes

    Azure Management Groups

    • Management groups are used to organize Azure subscriptions and resources
    • A subscription can be moved between management groups if the user has the required RBAC permissions
    • Virtual networks are not allowed at the root and are inherited, deny overrides are allowed

    Azure Policies

    • Azure policies can be created to manage Azure resources
    • Policies can be used to allow or deny specific actions on Azure resources
    • For example, a policy can be created to prevent the creation of Azure SQL servers in a specific subscription or resource group

    Azure Logic Apps

    • Logic App Contributor role is required to manage logic apps, but not to access them
    • Developers group needs the Logic App Contributor role to create logic apps in the Dev resource group

    Azure Data Import/Export

    • Import job involves attaching an external disk to a server, copying data to disk drives, encrypting the disk drives, and shipping the drives to an Azure data center
    • The WAImportExport tool is used to copy data to disk drives
    • The import job is created in the Azure portal, and the drives are shipped to the Azure data center for processing

    Azure File Sync

    • Azure File Sync is used to sync files between on-premises servers and Azure file shares
    • A sync group must contain one cloud endpoint, which represents an Azure file share, and one or more server endpoints
    • Server endpoints can be added to the sync group, and files can be synced between the servers and the Azure file share

    Azure Storage Accounts

    • An Azure storage account can contain multiple file shares
    • A UNC path is used to reference files in a file share, in the format \.file.core.windows.net\
    • A container can be created in a storage account using the Azure CLI

    Shared Access Signatures (SAS)

    • A SAS is a URI that grants limited access to a resource in a storage account
    • A SAS can be created with specific permissions and a specific duration
    • A SAS can be used to grant access to a file share or container in a storage account

    Studying That Suits You

    Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

    Quiz Team

    Related Documents

    AZ-104-Version 10.0.pdf

    Description

    Test your knowledge of Azure management groups and policies. Learn how to add subscriptions and create policies in Azure.

    More Like This

    Use Quizgecko on...
    Browser
    Open
    Browser
    Browser