Microsoft (Azure Fundamentals) Flashcards

Which type of data does Azure Storage Service Encryption (SSE) assist secure by automatically encrypting?

Answer: data at rest

Azure Storage Service Encryption (SSE) is designed to protect data that is 'at rest' in Azure storage accounts. This means it automatically encrypts data when it is persisted to storage media, such as blobs, files, queues, and tables. While Azure also offers encryption for data in transit (e.g., via TLS), SSE specifically addresses the security of stored data.

Which of the following is a fundamental component of a cloud adoption environment that has been deployed and set up to host workloads?

Answer: landing zone

A landing zone is a fundamental component in cloud adoption, representing a pre-configured, secure, and scalable environment in the cloud. It is specifically designed and set up to host workloads, providing the necessary infrastructure, governance, and security controls. This allows organizations to deploy applications and services confidently while adhering to best practices and organizational policies.

Which of the following Azure features logically links user accounts to the resources created by those user accounts?

Answer: subscriptions

In Azure, subscriptions serve as a logical container that links user accounts to the resources created by those accounts. They define the billing boundary for Azure services and also act as a management boundary for applying policies and access controls. All resources deployed in Azure must belong to a subscription, making it crucial for organizing and managing cloud assets.

In Azure, which of the following is the primary technique of access management?

Answer: RBAC (role-based)

Role-Based Access Control (RBAC) is the primary technique for managing access to Azure resources. It allows you to define granular permissions based on roles, specifying who can do what with which resources. By assigning users, groups, or applications to predefined or custom roles, RBAC ensures that individuals only have the necessary access to perform their job functions, enhancing security and compliance.

Which Azure service can manage on-premises resource migration as well as manage and coordinate disaster recovery for business continuity and disaster recovery?

Answer: Azure Site Recovery

Azure Site Recovery is a disaster recovery service that helps manage and orchestrate the replication, failover, and recovery of machines and applications. It can protect on-premises virtual machines and physical servers, as well as Azure VMs, ensuring business continuity during outages. This service is crucial for maintaining application availability and minimizing downtime by coordinating disaster recovery efforts.

Which of the following is open-source orchestration software for deploying, managing, and scaling containers across a cluster when working with widely used Azure applications?

Answer: Kubernetes

Kubernetes is an open-source container orchestration platform that automates the deployment, scaling, and management of containerized applications across a cluster. It is widely used in Azure (as Azure Kubernetes Service, AKS) to manage complex, distributed applications. Kubernetes provides features like self-healing, load balancing, and automated rollouts, making it ideal for modern cloud-native development.

Which TCP port must be available for Azure file sharing to work?

Answer: 445

Azure File shares use the Server Message Block (SMB) protocol for communication, which is a network file sharing protocol. TCP port 445 is the standard port used by the SMB protocol. Therefore, for Azure file sharing to function correctly, TCP port 445 must be open and accessible from the client attempting to connect to the file share.

What Azure product automatically detects application components on Windows and Linux platforms and visually maps service interactions, making it particularly beneficial for migrations?

Answer: Service Map

Azure Service Map, a feature of Azure Monitor, automatically discovers application components on Windows and Linux platforms and visually maps service interactions. It provides a comprehensive view of connections between servers, processes, and ports, making it invaluable for understanding complex application architectures, troubleshooting, and planning migrations. This helps identify dependencies and potential issues across your environment.

Which of the following Azure roles is not one of the built-in ones?

Answer: Author

Azure has several built-in roles that define common sets of permissions, such as Owner, Contributor, and Reader, which grant different levels of access to manage Azure resources. 'Author' is not a standard built-in role in Azure's Role-Based Access Control (RBAC) system. Built-in roles are predefined by Azure to simplify access management.

Azure takes a multi-layered security approach. NSGs (network security groups) operate at which two layers?

Answer: 3 & 4

Network Security Groups (NSGs) in Azure operate at layers 3 (Network Layer) and 4 (Transport Layer) of the OSI model. They allow you to filter network traffic to and from Azure resources in a virtual network based on source/destination IP address, source/destination port, and protocol. This provides a fundamental level of network security by controlling inbound and outbound traffic flows.

Which of the following is the entire time it takes to complete a disk IO request?

Answer: Latency

Latency refers to the time delay between when an I/O request is issued and when it is completed. It encompasses the entire duration it takes for a disk I/O request to travel from the application, through the operating system and storage stack, to the physical disk, and for the response to return. Lower latency indicates faster response times for storage operations.

Which two forms of scaling are synonymous?

Answer: Vertical scaling

Vertical scaling, also known as 'scaling up,' involves increasing the capacity of an existing resource, such as adding more CPU, memory, or disk space to a single virtual machine. This enhances the performance of a single instance. In contrast, horizontal scaling (scaling out) involves adding more instances of a resource.

What is the maximum number of VMs that may be added to a scale set using the VM orchestration mode?

Answer: 200

When using the Virtual Machine Orchestration mode for Azure Virtual Machine Scale Sets, the maximum number of VMs that can be added to a single scale set is 200. This mode provides greater control over individual VM instances within the set, allowing for custom configurations and management while still benefiting from scale set features.

Azure Disk Encryption encrypts all disks, including managed disks, that are utilized in Azure. The DM-Crypt technology is used to encrypt the drives under Linux. What encryption method does Windows make use of?

Answer: BitLocker

Azure Disk Encryption uses industry-standard encryption technologies to encrypt the OS and data disks of Azure virtual machines. For Windows VMs, it leverages BitLocker, a full-disk encryption feature built into the Windows operating system. For Linux VMs, it uses DM-Crypt.

Which of the three main disk roles in Azure is not one of the three?

Answer: Assembler disk

In Azure, the three main disk roles for a virtual machine are the OS disk, data disks, and temporary disk. The OS disk contains the operating system, data disks are used for persistent data storage, and the temporary disk provides short-term storage for applications and processes. 'Assembler disk' is not a recognized disk role in Azure's virtual machine architecture.

Which of the following is used to link a virtual machine (VM) to a virtual network (VNet)?

Answer: Network interface card

A Network Interface Card (NIC) is used to connect a virtual machine (VM) to a virtual network (VNet) in Azure. Each VM requires at least one NIC to enable network communication, allowing it to send and receive data within the VNet and to the internet (if configured). The NIC defines the IP configuration and network security group associations for the VM.

Restarting VMs in a partially deallocated availability set has the same effect as which of the following?

Answer: adding VMs

When VMs in a partially deallocated availability set are restarted, Azure treats this action similarly to adding new VMs to the availability set. This is because deallocated VMs release their underlying hardware resources, and restarting them involves provisioning new resources. This process can potentially place them on different fault and update domains, which is akin to adding new instances to maintain the high availability guarantees of the set.

Multithreading will result in [Blank] IOPS and [Blank] throughput when used to push a larger number of requests to Premium Storage.

Answer: higher, higher

When using multithreading to push a larger number of requests to Premium Storage, it allows for parallel processing of I/O operations. This concurrency leads to both higher IOPS (Input/Output Operations Per Second) because more operations are completed simultaneously, and higher throughput (data transfer rate) as more data is processed in parallel. Effectively utilizing multiple threads maximizes the storage's performance capabilities.

Your scale set can automatically scale in all of the following ways when an autoscale rule is triggered, except for which one?

Answer: Increase percent to

Azure Autoscale rules for scaling in (reducing instances) typically offer options like 'Decrease count by' (reduce by a fixed number), 'Decrease percent by' (reduce by a percentage of current instances), or 'Decrease count to' (reduce to a specific number of instances). 'Increase percent to' is an action for scaling *out* (adding instances), not scaling in.

Which Azure feature allows you to scale apps automatically based on usage patterns and resource utilization?

Answer: Autoscale

Azure Autoscale is a feature that allows applications to automatically scale their resources (like VM instances in a scale set or App Service plans) based on demand or a schedule. It monitors metrics such as CPU usage, memory, or queue length and automatically adds or removes instances to match the workload. This ensures optimal performance and cost efficiency by dynamically adjusting resources.