Podcast
Questions and Answers
What is a requirement for balancing requests across VMs using a Basic Azure Load Balancer?
What is a requirement for balancing requests across VMs using a Basic Azure Load Balancer?
Which two parameters are required in a Shared Access Signature (SAS)?
Which two parameters are required in a Shared Access Signature (SAS)?
What happens when Azure needs capacity for other workloads while using Azure Spot Instances?
What happens when Azure needs capacity for other workloads while using Azure Spot Instances?
How long can data be pinned on the Azure dashboard?
How long can data be pinned on the Azure dashboard?
Signup and view all the answers
Which type of DNS record maps a domain name to another domain name?
Which type of DNS record maps a domain name to another domain name?
Signup and view all the answers
What is necessary for the Standard Load Balancer to balance requests across VMs?
What is necessary for the Standard Load Balancer to balance requests across VMs?
Signup and view all the answers
Which command is used to create a new managed disk in Azure VM commands?
Which command is used to create a new managed disk in Azure VM commands?
Signup and view all the answers
What should be installed on the destination VM to restore a backup successfully?
What should be installed on the destination VM to restore a backup successfully?
Signup and view all the answers
What is the maximum storage capacity of the Standard App Service Plan?
What is the maximum storage capacity of the Standard App Service Plan?
Signup and view all the answers
Which command is used to perform a ping/ICMP test in Azure?
Which command is used to perform a ping/ICMP test in Azure?
Signup and view all the answers
What is required for a storage account to support Data Lake Storage?
What is required for a storage account to support Data Lake Storage?
Signup and view all the answers
Which Azure service is designed to store metrics in a time-series database?
Which Azure service is designed to store metrics in a time-series database?
Signup and view all the answers
What is the function of the Azure Custom Script Extension?
What is the function of the Azure Custom Script Extension?
Signup and view all the answers
Which type of access control is enabled when a hierarchical namespace is applied?
Which type of access control is enabled when a hierarchical namespace is applied?
Signup and view all the answers
Which role in Microsoft Entra allows the creation and management of users and groups?
Which role in Microsoft Entra allows the creation and management of users and groups?
Signup and view all the answers
Which statement regarding the management of virtual machines in Azure is true?
Which statement regarding the management of virtual machines in Azure is true?
Signup and view all the answers
What is a requirement for applying a lifecycle management rule to blobs?
What is a requirement for applying a lifecycle management rule to blobs?
Signup and view all the answers
What is required to receive an email alert on an event in Azure?
What is required to receive an email alert on an event in Azure?
Signup and view all the answers
Which feature does Azure DNS Private Resolver provide?
Which feature does Azure DNS Private Resolver provide?
Signup and view all the answers
What is a condition for assigning licenses based on Microsoft Entra ID attributes?
What is a condition for assigning licenses based on Microsoft Entra ID attributes?
Signup and view all the answers
What kind of policy can be applied to prevent data modification in block blobs?
What kind of policy can be applied to prevent data modification in block blobs?
Signup and view all the answers
What is the retention period for backups of virtual machines in Azure by default?
What is the retention period for backups of virtual machines in Azure by default?
Signup and view all the answers
What is the main focus of the Billing Administrator role in Microsoft Entra?
What is the main focus of the Billing Administrator role in Microsoft Entra?
Signup and view all the answers
What type of protocol is used for SMB communication in Azure?
What type of protocol is used for SMB communication in Azure?
Signup and view all the answers
What is a careful method to ensure geographic redundancy in Azure Storage?
What is a careful method to ensure geographic redundancy in Azure Storage?
Signup and view all the answers
Which of the following methods is NOT part of migrating an on-premises identity provider to Azure AD?
Which of the following methods is NOT part of migrating an on-premises identity provider to Azure AD?
Signup and view all the answers
In the hub and spoke model, which function does the hub VNET primarily serve?
In the hub and spoke model, which function does the hub VNET primarily serve?
Signup and view all the answers
What type of managed identity is specifically tied to the lifecycle of the resource it is associated with?
What type of managed identity is specifically tied to the lifecycle of the resource it is associated with?
Signup and view all the answers
Which protocol can be used to query resource data across Azure subscriptions via the Azure Resource Graph?
Which protocol can be used to query resource data across Azure subscriptions via the Azure Resource Graph?
Signup and view all the answers
What is the purpose of implementing custom WAF rules?
What is the purpose of implementing custom WAF rules?
Signup and view all the answers
When moving resources in Azure, which resource cannot be relocated?
When moving resources in Azure, which resource cannot be relocated?
Signup and view all the answers
Which requirement must be fulfilled to prepare a subscription for alert notifications?
Which requirement must be fulfilled to prepare a subscription for alert notifications?
Signup and view all the answers
What configurations should be set to record successful and failed requests in Azure VM?
What configurations should be set to record successful and failed requests in Azure VM?
Signup and view all the answers
Which series of Azure VMs is specifically optimized for memory-intensive enterprise applications?
Which series of Azure VMs is specifically optimized for memory-intensive enterprise applications?
Signup and view all the answers
What is required to restrict access to an Azure Blob Storage container based on specific IP addresses?
What is required to restrict access to an Azure Blob Storage container based on specific IP addresses?
Signup and view all the answers
Which of the following authentication types is NOT supported by Azure AD?
Which of the following authentication types is NOT supported by Azure AD?
Signup and view all the answers
In order to enable high availability of VMs at 99.95%, what must be defined?
In order to enable high availability of VMs at 99.95%, what must be defined?
Signup and view all the answers
Which Azure VM series is designed with a higher CPU-to-memory ratio?
Which Azure VM series is designed with a higher CPU-to-memory ratio?
Signup and view all the answers
What log message severity must be set to store all warnings or higher in Azure?
What log message severity must be set to store all warnings or higher in Azure?
Signup and view all the answers
When connecting a Windows device to Azure AD using AD Join, which principal is NOT added to the local administrators group?
When connecting a Windows device to Azure AD using AD Join, which principal is NOT added to the local administrators group?
Signup and view all the answers
Study Notes
Storage Accounts
- For Data Lake Storage, storage accounts must support blob storage available in standard general-purpose v2 and premium block blobs.
- Immutability policies include timed retention and legal hold policies to prevent block deletion.
- Lifecycle policies dictate the behavior of blobs or containers over time.
- Access tracking must be enabled with lifecycle management rules for automatic blob movement or deletion based on modification or access times.
- POSIX-compliant access control lists require hierarchical namespace activation.
- Microsoft Entra Kerberos can be used for identity-based access in file shares.
- Block blobs and append blobs support Immutable Storage to ensure data integrity.
Deletion Locks
- Deletion locks cannot be applied to management groups.
- They can be applied to resource groups, subscriptions, and VMs.
Azure Policies
- Custom recommendations must use the RemediationDescription field in metadata for Azure Policies.
Microsoft Entra Roles
- User Administrator role allows user and group management, support ticket handling, and monitoring service health.
- Billing Administrator focuses on financial management.
- Service Administrator has full access to Azure services.
- Cost Management Reader can view billing information and manage budgets.
- User Access Administrator grants permissions for resource locks.
- Not all Microsoft 365 services are universal; usage location must be defined for license assignment.
License Assignment
- Dynamic groups are needed for assigning licenses based on MS Entra ID attributes.
- Rules must be configured on custom attributes for dynamic groups to sync automatically.
Deployments
- TemplateUri specifies the location of the template file.
- TemplateFile indicates the local directory of the template file.
- TemplateSpecId refers to templates saved within Azure.
- Resource group specification is possible during template deployment.
App Service Plans
- Free: 0 instances, 1GB storage.
- Basic: 10GB storage, 3 instances.
- Standard: 50GB storage, 10 instances.
- Premium: 250GB storage, 30 instances.
Useful Commands
-
netstat -an: Lists the ports the server is listening on. -
Test-NetConnection: Executes a ping/ICMP test. -
nbtstat -c: Checks the NBT cache. -
Get-AzVirtualNetwork: Retrieves virtual networks within a resource group.
Azure Metrics
- Log Analytics workspace is essential for log data from Azure Monitor.
- Azure Monitor uses a time-series database optimized for time-stamped data analysis.
- Activity logs can help preemptively detect and address issues.
- Azure Advisor analyzes configuration and usage metrics without time-lapsed data.
- Azure Cost focuses on spending optimization.
- Azure VM Insights monitors VM health and performance.
- Log analytics requires creating a log analytics resource and enabling diagnostics on load balancers.
Virtual Machines (VM) General Info
- VM backups are maintained for 30 days by default.
- Azure Custom Script Extension facilitates post-deployment configurations.
- Desired State Configuration (DSC) allows management via configuration as code.
- Azure VMAccess extension enables console access for Linux management.
- VMs cannot be moved to another VNET; deletion and recreation are necessary for a new VNET target.
- Creation of VMs in availability zones requires configuring availability options.
Alerts
- Email notifications for events require an alert rule and action group setup.
DNS Resolvers
- Virtual network links integrate with private DNS zones.
- Azure DNS Private Resolver facilitates DNS query proxying between on-premises and Azure.
- Custom DNS servers can be deployed as VMs or appliances but do not work with private DNS zones.
Domain Name Records
- A record connects a domain name to an IP address.
- CNAME record links one domain name to another.
- NS record assigns delegation for subdomains.
Azure Dashboard
- Data can be pinned for a 14-day limit.
Network Peering
- IP addresses must not overlap; location is irrelevant.
Azure Load Balancers
- Basic Load Balancer operates within a single availability zone and supports only Basic SKU public IP.
- Standard Load Balancer is zone-redundant with a higher cost.
- Session persistence must be set to ClientIP and Protocol for consistent server connections.
- VMs using Basic Load Balancer must be part of a scale or availability set.
- Standard Load Balancer requires VMs to belong to the same virtual network.
Tokens
- SAS (Shared Access Signature) requires SignedServices for specifying accessible resources and SignedResourceTypes for service types.
- SAS optional parameters include SignedStart for validity start and SignedIp for IP range restrictions.
Azure Instances
- Azure Spot Instances offer reduced-cost VM provisioning but are susceptible to interruption for higher priority workloads.
- VMs must attach network interfaces within subnets for communication.
Backups
- To restore VM backups, Microsoft Azure Recovery Services Agent must be installed on the destination VM.
Azure VM Series
- A-series: Best for entry-level workloads.
- D-series: Balances vCPUs, memory, and storage for typical production workloads.
- E-series: Optimized for memory-heavy applications.
- F-series: High CPU-to-memory ratio.
- M-series: Ideal for memory-intensive applications.
NSGs (Network Security Groups)
- NSGs can be associated with network interfaces and subnets.
Access Restrictions
- Virtual network service endpoints restrict Azure Blob Storage access to specific networks or IPs.
Diagnostics
- Application Logging (Blob) must be enabled to store warning-level logs for over a week.
Azure Import/Export
- Large data transfers to Azure Storage require Blob Storage or File Storage.
- Only containers, such as blobs, can be exported.
Azure Password Security
- Administrators have a different password reset policy without security question prompts.
- Fraud features block accounts for 90 days unless unblocked by an admin.
Service Level Agreements (SLA)
- Achieving 99.95% availability for VMs requires defining an availability set with a scale set.
Azure AD
- Windows devices joined to Azure AD add specific security principals to local admin groups.
- Authentication types include federated, pass-through, and password hash synchronization.
- Azure AD Access Reviews automate the review process, including reminders and revoking access.
Migration to Azure AD
- Migration methods include Azure AD Connect cloud sync, password hash synchronization, and staged migration processes.
Web Application Firewall (WAF)
- Custom WAF rules can protect applications from common web attacks by blocking specific patterns or keywords.
Disaster Recovery
- GRS, RA-GRS, and ZRS for Azure Storage ensure geographic redundancy and availability for enhanced disaster recovery.
Hub and Spoke Model
- Provides scalable architecture where the hub VNET houses shared services, and spoke VNETs contain specific applications.
Azure Service Endpoints
- Allow precise network access restrictions to storage accounts for heightened security.
Managed Identities
- Authenticate access to other Azure services using system-assigned or user-assigned identities.
Azure Backup Policy
- Retention ranges must be defined within the backup policy to ensure backups are maintained.
Azure Resource Graph
- Facilitates resource data queries using KQL, REST API, PowerShell, and Azure CLI.
Azure Security
- Azure Sentinel is used for the analysis of security threats and anomalies.
Alerts Management
- Rate limiting applies to alerts: SMS (1 every 5 min), Voice (1 every 5 min), Email (up to 100 in an hour).
- Create a log analytics workspace to prepare subscriptions for alerts.
Moving Resources
- Storage can be relocated across locations, but NICs attached to VMs cannot be moved.
- Public IPs are region-specific and thus non-transferable.
Virtual Networks
- A Virtual Network Gateway is required for connecting two VNETs across different subscriptions.
- Secure private connections from on-premises networks to Azure VNET utilize ExpressRoute.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Related Documents
Description
This quiz covers the essential features of storage accounts, focusing on Data Lake Storage and blob storage types. It highlights the importance of immutability policies, lifecycle management, and access tracking in managing blob data effectively. Test your knowledge on these crucial concepts.
