Mixed Deck — All Microsoft Certification Topics Flashcards

What is the primary consideration when choosing between Azure Traffic Manager and Azure Front Door?

Answer: Traffic Manager routes DNS-level traffic globally; Front Door is an application-layer (L7) global load balancer with WAF and CDN capabilities

Traffic Manager operates at DNS level for global routing, while Azure Front Door provides Layer 7 HTTP routing with built-in WAF, SSL offload, and CDN edge caching.

In Azure, which of the following is the primary technique of access management?

Answer: RBAC (role-based)

Role-Based Access Control (RBAC) is the primary technique for managing access to Azure resources. It allows you to define granular permissions based on roles, specifying who can do what with which resources. By assigning users, groups, or applications to predefined or custom roles, RBAC ensures that individuals only have the necessary access to perform their job functions, enhancing security and compliance.

What does the Power Platform environment represent?

Answer: A container to store, manage, and share business data, apps, and flows with defined access controls

A Power Platform environment is a space that stores Dataverse databases, apps, flows, and chatbots, with its own security boundary and region.

What is the primary purpose of a data warehouse?

Answer: To store and analyze large volumes of historical data for reporting

A data warehouse is optimized for storing and analyzing large amounts of historical data to support business intelligence, analytics, and reporting.

What is Azure Cosmos DB?

Answer: A globally distributed, multi-model NoSQL database service

Azure Cosmos DB is a globally distributed, multi-model NoSQL database service that guarantees low-latency access and high availability worldwide.

Which Microsoft 365 service is designed primarily for team communication and collaboration?

Answer: Microsoft Teams

Microsoft Teams is Microsoft 365's hub for teamwork, providing chat, video meetings, and file collaboration in one place.

What is the difference between Azure Service Bus queues and topics?

Answer: Queues support one-to-one messaging; topics support one-to-many pub/sub messaging

Service Bus queues enable point-to-point messaging, while topics with subscriptions enable publish/subscribe patterns for delivering messages to multiple receivers.

What is the purpose of Azure Container Registry (ACR)?

Answer: Storing and managing private Docker container images

Azure Container Registry is a managed, private Docker registry service for storing and managing container images and related artifacts.

What is the purpose of Azure Event Grid?

Answer: Routing events from Azure services and custom sources to event handlers in real time

Azure Event Grid is a fully managed event routing service that delivers events from sources like Azure Blob Storage or custom apps to handlers like Azure Functions or webhooks.

_____________ is the ability of a system to stay up and functioning even if one of its components is down, such as a single Azure data center outage.

Answer: Fault tolerance

Fault tolerance is the ability of a system to continue operating without interruption even if one or more of its components fail. In Azure, this means that services and applications can remain available and functional despite issues like a single data center outage, often achieved through redundancy and replication across different regions or availability zones. It ensures resilience against failures.

Which HTTP status code does Azure API Management return when a request exceeds a rate limit policy?

Answer: 429 Too Many Requests

When a rate limit is exceeded in Azure API Management, it returns HTTP 429 Too Many Requests to inform the caller to slow down.

What is a primary key in a relational database?

Answer: A unique identifier that distinguishes each row in a table

A primary key uniquely identifies each row in a database table, ensuring no two rows have the same key value and enabling efficient lookups.

Which Azure service provides a fully managed Kubernetes environment for containerized application deployment?

Answer: Azure Kubernetes Service (AKS)

Azure Kubernetes Service (AKS) provides a managed Kubernetes cluster where Azure handles control plane operations, upgrades, and health monitoring.

What is the principle of 'Least Privilege' in security?

Answer: Granting users only the minimum permissions necessary to perform their job functions

Least Privilege limits user access rights to only what is strictly required for their role, reducing the attack surface if credentials are compromised.

What does Azure Monitor primarily do?

Answer: Collects, analyzes, and acts on telemetry data from Azure resources

Azure Monitor collects metrics and logs from Azure resources and applications to help detect and diagnose issues and understand performance.

Which Azure governance tool enforces organizational standards and assesses compliance at scale?

Answer: Azure Policy

Azure Policy creates and enforces rules to ensure resources comply with corporate standards.

What does managed identity in Azure allow an application to do?

Answer: Authenticate to Azure services without storing credentials in code

Managed Identity provides Azure apps with an automatically managed identity in Azure AD, allowing them to authenticate to Azure services without storing credentials.

What is the difference between a trigger and an action in Power Automate?

Answer: A trigger starts the flow; an action is a step performed after the trigger

In Power Automate, a trigger initiates the flow (e.g., a new email), and actions are the subsequent steps performed in response.

What does Conditional Access in Azure AD allow administrators to do?

Answer: Enforce access policies based on conditions like location and device

Conditional Access evaluates signals like user location, device compliance, and risk level to enforce access policies.

Which of the following is used to link a virtual machine (VM) to a virtual network (VNet)?

Answer: Network interface card

A Network Interface Card (NIC) is used to connect a virtual machine (VM) to a virtual network (VNet) in Azure. Each VM requires at least one NIC to enable network communication, allowing it to send and receive data within the VNet and to the internet (if configured). The NIC defines the IP configuration and network security group associations for the VM.