Microsoft Certified: Azure Fundamentals Average Salary — $126,653/year
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech
Amazon’s AWS and Microsoft’s Azure are the big boys of the cloud computing world, even though AWS is much bigger than Azure.
Revenue from Microsoft Azure grew 72% from 2018 from $7.56 billion to $13 billion. Azure contributed to almost 10.5% of Microsoft’s total revenue in 2019. It has also been noted that the US defense chose Azure in its tactical operations. The last quarter earnings of 2019 grew by 64%.
Azure Fundamentals exam is an opportunity to prove knowledge of:
Describing Cloud Concepts (20%),
Describing Azure services (20%),
Describing core solutions and management tools on Azure (10-15%),
Describing general security and network security features (10-15%),
Describing identity, governance, privacy, and compliance features (15-20%),
Describe Azure cost management and Service Level Agreements (10-15%)
This blog also includes Azure Services Cheat Sheet.
The exam is intended for candidates who are just beginning to work with cloud-based solutions and services or are new to Azure.
Candidates should be familiar with the general technology concepts, including concepts of
networking, storage, compute, application support, and application development.
Azure Fundamentals can be used to prepare for other Azure role-based or specialty
certifications, but it is not a prerequisite for any of them.
Download Azure Fundamentals AZ900 Certification Exam Prep
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech
Azure Fundamentals AZ900 Exam Prep in Udemy [50% OFF with this link]
Azure Fundamentals AZ900 Exam Prep on iOs
Azure Fundamentals AZ900 Exam Prep on android
Azure Fundamentals AZ900 Exam Prep on Windows 10/11
Azure Fundamentals AZ900 Exam Prep on Web/PWA
Below are the top 100 AZ-900 Microsoft Azure fundamentals Certification exam questions and answers dumps.
I- AZ-900 Cloud Concepts – Azure Services
Question 1: Microsoft Office 365 is an example of which cloud deployment model?
A. PaaS
B. IaaS
C. CASB
D. SaaS
Answer1:
Notes:
Question 2: You have an on-premises application that processes incoming Simple Message Submission Service (SMSS) queue messages and records the data to a log file. You migrate this application to an Azure function app. What kind of cloud service would this be considered?
A. Software-as-a-Service (SaaS)
B. Infrastructure-as-a-Service (IaaS)
C. Serverless
D. Platform-as-a-Service (PaaS)
Answer2:
Download Azure Fundamentals AZ900 Certification Exam Prep
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech
Azure Fundamentals AZ900 Exam Prep in Udemy [50% OFF with this link]
Azure Fundamentals AZ900 Exam Prep on iOs
Azure Fundamentals AZ900 Exam Prep on android
Azure Fundamentals AZ900 Exam Prep on Windows 10/11
Azure Fundamentals AZ900 Exam Prep on Web/PWA
Notes2:
Question 3: Define “economy of scale”.
A. Spending money on products or services now and being billed for them now. You can deduct this expense from your tax bill in the same year.
B. Spending money on physical infrastructure up front, and then deducting that expense from your tax bill over time.
C. Prices for individual resources and services are provided so you can predict how much you will spend in a given billing period based on your expected usage.
D. The ability to do things more efficiently or at a lower cost per unit when operating at a larger scale.
Answer 3:
Notes 3:
Question 4: Which of the following are characteristic of private clouds?
A. Lower costs
B. High scalability
C. Improved security
D. Limited flexibility
Answer 4:
Notes 4:
Question 5: Which of the following Azure solutions allows you to geographically cache and distribute high-bandwidth content, such as streaming videos, to users in different parts of the world?
A. Content Delivery Network (CDN)
B. Load Balancer
C. Application Gateway
D. Virtual Network Gateway
Answer 5:
Notes 5:
Question 6: You are beginning to extend your on-premises data center into Azure. You have created a new Azure subscription and resource group called RG-One. You deploy two virtual machines into RG-One with the intent of promoting these to Active Directory domain controllers. What kind of cloud service would this be considered?
A. Platform-as-a-Service (PaaS)
B. Infrastructure-as-a-Service (IaaS)
C. Software-as-a-Service (SaaS)
D. Hybrid-as-a-Service (HaaS)
Answer 6:
Notes 6:
Download Azure Fundamentals AZ900 Certification Exam Prep App For More
AZ900 Prep on iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330
Azure Fundamentals AZ900 Exam Prep on Udemy [50% OFF]
AZ900 Prep on android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen
AZ900 Prep on Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5
Az900 Prep on Web/PWA: https://azurefundamentalsexamprep.com
Djamgatech App store
Question 7: Select the concept that is defined as ensuring that servers are available if a single data center goes offline.
A. Scalability
B. Fault tolerance
C. Elasticity
D. Agility
Answer 7:
Notes 7:
Question 8: In regards to comparing Public Cloud and Private Cloud, which of these best describe the characteristics of a Public Cloud?
A. No-upfront costs
B. More control over the security
C. Less reliability
D. Less maintenance
Answer 8:
Notes 8
Question 9: Which of the following are considered capital expenditures (CapEx)?
A. Storage area network
B. Cloud-based virtual machine
C. Office 365 licenses
D. Hyper-V host server
Answer 9:
Notes 9:
Question 10: You are in the process of migrating your existing on-premises SQL databases to Azure. You will migrate them to Azure SQL databases, as opposed to deploying SQL database servers in Azure. What kind of cloud service would this be considered?
A. Software-as-a-Service (SaaS)
B. Platform-as-a-Service (PaaS)
C. Serverless
D. Infrastructure-as-a-Service (IaaS)
Answer 10:
Notes 10:
Question 11: Which of the following statements are true for IaaS cloud services?
A. The client is responsible for purchasing all Operating System (OS) host licensing.
B. Services can be scaled automatically to support system load.
C. The client has complete control over the host operating system.
D. The client is responsible for all guest OS and application updates.
Answer 11:
Notes 11:
Question 12: Which of the following tools can be used to manage Azure resources on a Google Chromebook?
A. Azure portal
B. PowerShell
C. Azure Cloud Shell
D. Azure CLI
Answer 12:
Notes 12:
Question 13: Which Azure service can provide big data analysis for machine learning?
A. Azure App Service
B. Azure WebJobs
C. Application Insights
D. Azure Databricks
Answer 13:
Notes 13:
Question 14: You need to create an Azure storage solution that will store messages created by an Azure web role. The messages will then be processed by an Azure worker role. What type of storage solution should you create?
A. A Queue service in a storage account
B. A virtual machine data disk
C. A File service in a storage account
D. A Blob service in a storage account
Answer 14:
Notes 14:
Question 15: You have an on-premises application that sends email notifications automatically based on a rule. You plan to migrate the application to Azure. You need to recommend a computing solution for the application that should minimize costs by incurring charges only when it is executed.
Which Azure solution is best for this type of application?
A. Logic App
B. A web app
C. Service Bus App
D. IaaS web server in Azure
Answer 15:
Notes 15:
Question 16: You are the Systems Administrator for a local university. You are deploying several sets of systems that will be used for research and development teams. Each set of systems will be uniform in nature, containing the same number and type of Azure resources.
What should you recommend to automate the creation of these Azure resources?
A. Azure Resource Manager templates
B. Multiple Azure subscriptions
C. Management groups
D. Virtual machine scale sets
Answer 16:
Notes 16:
Question 17: You are deploying a pair of Azure virtual machines. You want to ensure that the application will remain available in the event of a complete data center failure. What Azure technology will help most in this task?
A. Locally redundant storage
B. Zone Redundant Storage
C. Availability zone
D. Availability set
Answer 17:
Notes 17:
Question 18: Which of the following database solutions has the ability to add data concurrently from multiple regions simultaneously?
A. SQL managed instances
B. Cosmos DB
C. SQL Data Warehouses
D. Azure SQL Databases
Answer 18:
Notes 18:
Question 19: Which Azure service can host your web apps without you having to manage underlying infrastructure?
A. Azure App Service
B. Azure WebJobs
C. Azure Databricks
D. Application Insights
Answer 19:
Notes 19:
Question 20: Which of the following components can be used to load balance traffic to web applications, such as Azure App Service web apps using layer 7 of the OSI model?
A. Virtual Network
B. Virtual Network Gateway
C. Route table
D. Load Balancer
E. Application Gateway
Answer 20:
Notes 20:
Question 21: Which Azure service can help you collect, analyze, and act on telemetry from your cloud and on-premises environments?
A. Azure App Service
B. Azure Monitor
C. Azure Analyzer
D. Azure WebJobs
Answer 21:
Notes 21:
Download Azure Fundamentals AZ900 Certification Exam Prep App For More
AZ900 Prep on iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330
AZ900 Prep on android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen
AZ900 Prep on Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5
Az900 Prep on Web/PWA: https://azurefundamentalsexamprep.com
Djamgatech App store
II- Azure workloads, Security, Privacy, Compliance, and Trust
Question 22: Which of the following components are required to establish communication between on-premises resources and resources in Azure?
A. Virtual Network
B. VNet peer
C. Route tables
D. Virtual network gateway
Answer 22:
Notes 22:
Question 23: Which Azure service should you use to correlate metrics and logs from multiple resources into a centralized repository?
A. Azure Event Grid
B. Azure Event Hubs
C. Azure SQL Data Warehouse
D. Azure Monitor
Answer 23:
Notes 23:
Question 24: You are the Azure Administrator for Radio Gaga, LTD. You have a resource group named RG-RG and need to ensure no other administrators can create virtual networks in this resource group. What can you implement to accomplish this?
A. Access Control (IAM)
B. Azure policy
C. Locks
D. Properties
Answer 24:
Notes 24:
Question 25: Which of the following is the organization that defines standards used by the United States government?
A. NIST
B. ITIL
C. GDPR
D. ISO
Answer 25:
Notes 25:
Download Azure Fundamentals AZ900 Certification Exam Prep App For More
AZ900 Prep on iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330
Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF
AZ900 Prep on android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen
AZ900 Prep on Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5
Az900 Prep on Web/PWA: https://azurefundamentalsexamprep.com
Djamgatech App store
Question 26: You have an Azure virtual network named VNet in a resource group named Bob-RG. You assign an Azure policy specifying virtual networks are not an allowed resource type in Bob-RG. What happens to VNet once this policy is applied?
A. VNet is moved to a new resource group.
B. Bob-RG is deleted automatically
C. VNet continues to function normally, but no new subnets can be added.
D. VNet is deleted automatically.
Answer 26:
Notes 26:
Question 27: Which Azure tool allows you to view which user turned off a specific virtual machine during the last 14 days?
A. Azure Event Hubs
B. Azure Activity Log
C. Azure Service Health
D. Azure Monitor
Answer 27:
Notes 27:
Question 28: What kind of information does Azure Information Protection protect?
A. Email messages
B. Office documents
C. Azure Blob Storage
D. Virtual hard disks
E. PDF documents
Answer 28:
Notes 28:
Question 29: Which of the following is true regarding HDInsight?
A. It is an on-demand analytics job service that simplifies big data. Instead of deploying, configuring, and tuning hardware, you write queries to transform your data and extract valuable insights.
B. It is a managed relational cloud database service.
C. It is a cloud-based service that is a limitless analytics service that brings together enterprise data warehousing and Big Data analytics.
D. It is an open-source framework for the distributed processing and analysis of big datasets in clusters.
Answer 29:
Notes 29:
Download Azure Fundamentals AZ900 Certification Exam Prep
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech
Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330 android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen
Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5 Web/PWA: https://azurefundamentalsexamprep.comDjamgatech App store
Question 30: Which of the following website provides information on Azure product updates, roadmaps, and announcements?
A. https://preview.portal.azure.com/
B. https://azure.microsoft.com/en-us/updates/
C. https://portal.azure.com/
D. https://azure.microsoft.com/en-us/services/updates/
Answer 30:
Notes 30:
Questions 31: Azure virtual machines can be moved between which of the following Azure resources?
A. Subscriptions
B. Regions
C. Availability Sets
D. Resource Groups
E. Availability Zones
Answer 31:
Notes 31:
II- Azure Pricing and Support
Question 32: Which Azure support plans can open support cases?
A. Professional Direct
B. Basic
C. Standard
D. Developer
E. Premier
Answer 32:
Notes 32:
Question 33: For any Single Instance virtual machine using premium SSD or Ultra Disk for all Operating System Disks and Data Disks, what is the SLA guarantee for virtual machine connectivity?
A. 99.9%
B. 99.99
C. 99.95%
D. There is no SLA guarantee
Answer 33:
Notes 33:
Question 34: Which of the following Azure services is a cloud-based service that leverages massively parallel processing (MPP) to quickly run complex queries across petabytes of data in a relational database?
A. Azure SQL database
B. Azure HDInsight
C. Azure SQL Data Warehouse (Azure Synapse )
D. Azure Data Lake Analytics
Answer 34:
Notes 34:
Question 35: You have an Azure subscription that contains the following unused resources:
| Name | Type | Configuration |
|---|---|---|
| nic0 | Network Interface | 10.0.0.6 |
| pip1 | Public IP | Static |
| lb1 | Load Balancer | Standard, 5 rules configured |
| VNet2 | Virtual Network | 10.1.0.0/16 |
| VM3 | Virtual Machine | Stopped (Deallocated) |
Based on this information, which of the following unused resources should you remove to lower cost?
A. lb1
B. VNet2
C. pip1
D. nic0
E. VM3
Answer 35:
Notes 35:
Question 36: Which of the following recommendations is provided by Azure Advisor?
A. Azure resource costs
B. Azure virtual machine IP configuration
C. Storage performance and reliability
D. Azure App Service security
Answer 36:
Notes 36:
Download Azure Fundamentals AZ900 Certification Exam Prep#Azure
#AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330 android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen
Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5 Web/PWA: https://azurefundamentalsexamprep.comDjamgatech App store
Question 37: You are planning on purchasing Azure AD Premium for your Azure subscription. What is the SLA for this product?
A. 99.99%
B. 99.9%
C. 99.95%
D. Azure AD products are not covered under an SLA.
Answer 37:
Notes 37:
Question 38: Which of the following Azure support plans offer Severity “A” and “B” cases to be opened?
A. Premier
B. Standard
C. Developer
D. Professional Direct
E. Basic
Answer 38:
Notes 38:
Question 39: This question requires that you evaluate the underlined text to determine if it is correct.
When you are implementing a software as a service (SaaS) solution, you are responsible for configuring high availability.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed.
B. defining scalability rules
C. installing the SaaS solution
D. configuring the SaaS solution
Answer 39:
Notes 39:
Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF
Question 40: You have an on-premises network that contains several servers.
You plan to migrate all the servers to Azure.
You need to recommend a solution to ensure that some of the servers are available if a single Azure data center goes offline for an extended period.
What should you include in the recommendation?
A. fault tolerance
B. elasticity
C. scalability
D. low latency
Answer 40:
Notes 40:
Question 41: This question requires that you evaluate the underlined text to determine if it is correct.
When planning to migrate a public website to Azure, you must plan to pay monthly usage costs.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. Deploy a VPN
C. pay to transfer all the website data to Azure
D. reduce the number of connections to the website
Answer 41:
Notes 41:
Download Azure Fundamentals AZ900 Certification Exam Prep
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech iOs: https://apps.apple.com/ca/app/azure-fundamentals-az900-pro/id1553636330 android: https://play.google.com/store/apps/details?id=com.azurefundamentalspro.enoumen
Windows 10/11: https://www.microsoft.com/en-ca/p/azure-fundamentals-az-900-certification-exam-prep/9p1mh2vrq5h5 Web/PWA: https://azurefundamentalsexamprep.comDjamgatech App store
Question 42: You have an on-premises network that contains 100 servers.
You need to recommend a solution that provides additional resources to your users. The solution must minimize capital and operational expenditure costs.
What should you include in the recommendation?
A. a complete migration to the public cloud
B. an additional data center
C. a private cloud
D. a hybrid cloud
Answer 42:
Notes 42:
Question 43: Which Azure offering refers to a set of development, testing, and automation tools?
A. Azure Cognitive Services
B. Azure Boards
C. Azure DevOps
D. GitHub
Answer 43:
Question 44: Which of the following are available in the Azure Marketplace?
A. Virtual machine images
B. SaaS applications
C. Solution templates
D. Sample application code
Answer 44:
Question 45: Which of the following regulates data privacy in the European Union (EU)?
A. ITIL
B. GDPR
C. ISO
D. NIST
Answer 45:
Question 46: You currently have two Azure Pay-As-You-Go subscriptions. You would like to transfer billing ownership of the subscriptions to another account while moving the subscriptions into the other accounts Azure AD tenant. How can you accomplish this?
A. Open a support ticket by contacting Microsoft Azure Support
B. In the Azure Portal, under Azure Subscriptions click Change Directory
C. Using Azure CLI, run the az account merge command
D. In the Azure Portal, under Cost Management + Billing under Azure Subscriptions
Answer 46:
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech
Question 47: Where can you open a new Azure support request?
A. Knowledge Center
C. Azure Portal
D. Security Center
Answer 47:
Question 48: You attempt to create several managed disks in your Azure environment. In the Portal, you receive a message that you must increase your Azure subscription limits. What should you do to increase the limits?
A. Modify an Azure policy.
B. Use Azure PowerShell to create the new managed disks.
C. Create a new support request.
D. Upgrade your support plan.
Answer 48:
Question 49: A company wants to build a new voting kiosk for sales to governments around the world. Which IoT technologies should the company choose to ensure the highest degree of security?
A. IoT Hub
B. IoT Central
C. Azure Sphere
D. Azure IoT
Answer 49:
Question 50: This question requires that you evaluate the underlined text to determine if it is correct.
When you are implementing a software as a service (SaaS) solution, you are responsible for configuring high availability.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed.
B. defining scalability rules
C. installing the SaaS solution
D. configuring the SaaS solution
Answer 50:
Question 51: A company wants to quickly manage its individual IoT devices by using a web-based user interface. Which IoT technology should it choose?
A. IoT Hub
B. IoT Central
C. Azure Sphere
D. Azure IoT
Question 52: You want to send messages from the IoT device to the cloud and vice versa. Which IoT technology can send and receive messages?
A. IoT Hub
B. IoT Central
C. Azure Sphere
D. Azure IoT
IV- Microsoft Azure Question and Answers
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech
What is Azure VM temporary storage?
In Azure, every VM – regardless if Linux or Windows – gets a temporary disk assigned automatically. This temporary disk is located on the physical server (the hypervisor) where the Azure VM is hosted and is non-persistent. Disks used by the operating system or additionally added data disks are persistent disks and stored in Azure Storage.
Azure VM’s can be moved from its current host to new host at any time due to maintenance, hardware failures or other reasons. In such an event, the data from the temporary storage will not preserve or moved to the new host. Apart from the hardware failures, there are many other reasons data from the temporary disk will be lost:
- Resizing of the VM
- Restarting of the VM
- Moving from one host to another
- Updating/upgrading of host
Really, the temporary disk should never be used for data that has to be persistent. To avoid misconfiguration, the disk also has the drive label “Temporary Storage” and includes a text file “DATALOSS_WARNING_README.txt”. Read more here…
Does Azure VM include a Windows license?
It depends on the virtual machine type we talk about. Some Azure virtual machines include a Windows operating system license in their price (some even include a SQL Server). Some do not, however, there is an “Azure Hybrid Use Benefit” in certain Microsoft licensing programs, where basically the customer can use its previously acquired software licenses on Azure virtual machines (“bring you own license”). Also, there are Azure virtual machines available with different Linux distributions (both commercial and community), Windows Server license is obviously not included in these. Continue reading here
Please consult the Windows virtual machine pricing guide of Azure for details: Pricing – Windows Virtual Machines | Microsoft Azure
Does Azure VM cost include an OS disk?
What is a data disk in Azure VM?
What are things to look out for when choosing a location for your Microsoft Azure VM?
Could I connect to a Linux Azure VM using SSH and private IP through Putty?
How do I monitor my Azure VM?
- Step 1 − Login to Azure Management Portal.
- Step 2 − Go to Virtual Machine.
- Step 3 − Select the virtual machine you want to monitor.
- Step 4 − Select Monitor from the top menu as shown in following image.
How do we make an Azure VM accessible from outside?
- Open VM instance and run the server on port 80 and checked the localhost is running in the local browse,
- added port 80 in the inbound of Network security group,
- turned off all three types of firewall from the VM windows.
How do you see the memory usage of an Azure VM?
- Click on a Windows VM.
- Select Diagnostics settings from the Azure UI blade.
- Under the Overview tab: Pick a Storage account: Select your storage account so that the metrics stats can be stored. Click on ‘Enable guest level monitoring‘ and wait for the process to complete.
If I change the size of my Azure VM while running a script, will that stop the execution of the script? (Currently using a Linux VM).
How do I make an Azure VM snapshot?
- On the Azure portal, select Create a resource.
- Search for and select Snapshot.
- In the Snapshot window, select Create. …
- Enter a Name for the snapshot.
- Select an existing Resource group or enter the name of a new one.
- Select an Azure datacenter Location.
Can we restrict a developer (on Microsoft Azure VM) to not upload a source code on any website or email?
Why there is a difference in the same VM prices among Azure regions?
Can we spin up a Windows Azure VM programmatically from a php page? We can assume that we have valid Microsoft Credentials.
How do you reduce the size of my Azure VM disk?
Your company wants to use Azure to manage all of their IoT devices. They are going to create the infrastructure themselves, but need a backend in Azure to manage the flow of data, and to ensure security as well as ease of deployment of new devices. Which Azure product or solution would be suitable?
Azure IoT Hub is a solution for providing managed services for large IoT projects. It provides secure and reliable communication from devices to the Azure backend. Azure IoT Central is a SaaS solution that provides both managed connections and security as well as the dashboards and applications to use the data. Event Grid is used to connect many Azure services. IoT Hub
Your company has a new Azure virtual network that needs to be secured. What is the best way to only allow specific kinds of outside traffic into this network?
Use an Azure Firewall attached to the virtual network.
Azure Firewall blocks any incoming or outgoing traffic that isn’t specifically allowed on a network. A Network Security Group manages the traffic to specific services, Azure DDoS Protection Service protects against attacks and a load balancer distributes traffic to specific VMs. Azure Firewall FAQ
How is authorization different from authentication?
Authentication is the process of proving that you are who you say you are. Authorization is the act of granting an authenticated party permission to do something.
Authentication is the process of proving that you are who you say you are. It’s sometimes shortened to AuthN. The Microsoft identity platform uses the OpenID Connect protocol for handling authentication. Authorization is the act of granting an authenticated party permission to do something. It specifies what data you’re allowed to access and what you can do with that data. Authorization is sometimes shortened to AuthZ. The Microsoft identity platform uses the OAuth 2.0 protocol for handling authorization. Reference: Authentication vs. authorization
Which minimum costing support plan provides access to general guidance with architecture support?
The Developer support plan provides access to technical support via email in business hours and is the most-effective. The Standard and
Azure Support Plans Comparison
You are looking to build and host your website on Azure without needing to manage the underlying infrastructure. Which type of Cloud service should you choose?
Platform as a service (PaaS) is a complete development and deployment environment in the cloud, with resources that enable you to deliver everything from simple cloud-based apps to sophisticated, cloud-enabled enterprise applications, all without you having to manage any of the underlying infrastructure or services. Reference: What is PaaS? Platform as a Service
You are beginning to extend your on-premises data center into Azure. You have created a new Azure subscription and resource group called RG-One. You deploy two virtual machines into RG-One with the intent of promoting these to Active Directory domain controllers. What kind of cloud service would this be considered?
Infrastructure as a service (IaaS) is the use of on-demand computing infrastructure which is provisioned and managed over the internet. Deploying virtual machines into an Azure subscription would be considered an IaaS service. Reference: What is IaaS? Infrastructure as a Service
Define the concept of “dynamic elasticity.”
Dynamic elasticity is defined as a cloud service that both quickly scales up and also back down in order to serve your changing workload patterns for the lowest cost.
Which Azure service can host your web apps without you having to manage underlying infrastructure?
Azure App Service enables you to build and host web apps, mobile back-ends, and RESTful APIs in the programming language of your choice without managing infrastructure. Azure App Service documentation – Azure App Service
Which Azure service can you use to make sure your virtual machines are running smoothly and without problems?
Azure Monitor collects and analyzes telemetry data from your virtual machines to provide your with alerts and recommendations for how they are running.
Azure Monitor overview – Azure Monitor
Which Azure DevOps tool would you use to share applications and code libraries?
Azure Artifacts is a service in Azure DevOps, which can host code libraries and applications for you to share internally or externally. Azure Boards is for project managers. Azure Repos holds your source code. Azure Test Plans is used to create manual and automatic test scenarios for your application. Azure Pipelines is the process that builds and deploys your application. Azure DevOps Services
What are the main components of an Azure VPN Gateway setup?
The VPN Gateway must be attached to an Azure Virtual Network.
An on-premises network with a complimentary gateway that can accept the encrypted data.
A secure connection, called a tunnel, which encrypts the traffic sent through it.
An Azure VPN Gateway consists of a Virtual Network, a secure connection called a tunnel, and an on-premises network and gateway. A storage account, a backend pool of VMs and a Load Balancer are not needed. About Azure VPN Gateway
Your company has a large amount of documents that are both sensitive and important to a large number of people. How would you secure these documents so you can still share them, but track where they are?
Use Azure Information Protection – Azure Information Protection (AIP) is a cloud-based solution that helps your organization to classify and protect its documents and emails by applying labels. What is Azure Information Protection?
Which Azure solution would you implement to embed a watermark into Office documents that contain social security numbers?
Azure Information Protection (sometimes referred to as AIP) is a cloud-based solution that helps an organization classify and, optionally, protect its documents and emails by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations. Azure Active Directory. This includes access to resources in Azure AD, Azure resources, and other Microsoft Online Services, like Office 365 or Microsoft Intune. What is Azure Information Protection? – AIP
What are region pairs?
A region that is linked with another region in the same geography) – Azure has the concept of region pairs, these are two or more regions that are at least 300 miles apart within a single Geography. This enables the ability to replicate certain resources such as virtual machine storage across the geography providing protection against such events as natural disasters or civil unrest. Ensure business continuity & disaster recovery using Azure Paired Regions
Which Azure tool allows you to view which user turned off a specific virtual machine during the last 14 days?
The correct answer is the Azure Activity Log – it is a logging service that provides insight into subscription-level events that have occurred in Azure. This includes a range of data, from Azure Resource Manager operational data to updates on Service Health events. Events such as starting and stopping of virtual machines can be found here.
Overview of Azure platform logs – Azure Monitor
What does Azure Information Protection do?
Provides the ability to securely share sensitive data – Azure Information Protection helps control and secure information (including emails and documents) that is shared outside of your organization. Azure information protection
Which of the following can be used to manage governance across multiple Azure subscriptions?
A. Azure initiatives
B. Management groups
C. Resource groups
Which of the following is a logical unit of Azure services that links to an Azure account?
A. Azure subscription
B. Management group
C. Resource group
D. Public cloud
Which of the following features does not apply to resource groups?
A. Resources can be in only one resource group.
B. Role-based access control can be applied to the resource group.
C. Resource groups can be nested.
Which of the following statements is a valid statement about an Azure subscription?
A. Using Azure doesn’t require a subscription.
B. An Azure subscription is a logical unit of Azure services.
You need to process messages from a queue, parse them by using some existing imperative logic written in Java, and then send them to a third-party API. Which serverless option should you choose?
Azure Functions: Azure Functions is the correct choice because you can use existing Java code with minimal modification.
You want to orchestrate a workflow by using APIs from several well-known services. Which is the best option for this scenario?
Azure Logic Apps: Azure Logic Apps makes it easy to create a workflow across well-known services with less effort than writing code and manually orchestrating all the steps yourself.
Your team has limited experience with writing custom code, but it sees tremendous value in automating several important business processes. Which of the following options is your team’s best option?
Azure Logic Apps is best suited for users who are more comfortable in a visual environment that allows them to automate their business processes. Logic Apps is the best option in this scenario.
You need to predict future behavior based on previous actions. Which product option should you select as a candidate?
B. Azure Bot Service
C. Azure Cognitive Services
You need to create a human-computer interface that uses natural language to answer customer questions. Which product option should you select as a candidate?
B. Azure Cognitive Services
C. Azure Bot Service
You need to identify the content of product images to automatically create alt tags for images formatted properly. Which product option is the best candidate?
A. Azure Machine Learning
B. Azure Cognitive Services
C. Azure Bot Service
Your development team is interested in writing Graph-based applications that take advantage of the Gremlin API. Which option would be ideal for that scenario?
B. Azure SQL Database
C. Azure Databricks
D. Azure Database for PostgreSQL
CompanyA uses the LAMP stack for several of its websites. Which option would be ideal for migration?
C. Azure Database for PostgreSQL
CompanyA has millions of log entries that it wants to analyze. Which option would be ideal for analysis?
B. Azure SQL Database
C. Azure Database for PostgreSQL
D. Azure Synapse Analytics
Which of the following options can you use to link virtual networks?
B. Multi-chassis link aggregation
C. Dynamic Host Configuration Protocol
D. Virtual network peering
Which of the following options isn’t a benefit of ExpressRoute?
B. Consistent network throughput
C. Encrypted network communication
D. Access to Microsoft cloud services
Testimonial: Passed my AZ-900 on the second attempt!
Wow, what a difference a couple of days and a different set of questions makes. I took the exam Monday and fell just short of passing (659), and I retook it today and scored 850! The questions on the first attempt were definitely harder, and I could tell from the first few questions I was going to have a rough time.
Today was totally different and I felt like I was getting all the “gimme” questions first and was able to coast through most questions confidently. I flagged exactly half the questions for review and at the end I had 20 minutes leftover after I was done reviewing. Total day and night difference between the two attempts.
For preparation I used:
– Microsoft Learn
– A Cloud Guru AZ-900 course + practice exam
– Tutorials Dojo practice exam
– and of course, John Savill’s YT channel
I bought the TD practice exams because of all the suggestions here, and I can attest they were well worth the price. This morning before the exam I went through all the TD section-based exams and took each one until I scored 90% on every section. I don’t always condone preparing for the exam on the day of but it was certainly a nice confidence booster to help me get mentally prepared.
Testimonial: Passed my AZ-900 on the first attempt!
Pleased to have passed this first time with a score of 775!
For any looking to sit this, I’ve had around 3 years of experience proving 2nd line technical support for an Azure environment. I used the following to prep for this exam:
Scotty Duffy’s Udemy Course – this was a bit of a waste of time and money in my eyes, nowhere near detailed enough. There are some reviews from people saying they passed the exam using this course alone with no experience using Azure but I really do not believe that.
Tim Warner’s YouTube series – this was great bearing in mind it was free. Way more worth the time than Scott’s, I wish I’d have started here.
Tutorials Dojo Practise Exams – I’d only recommend using these exams to test your knowledge and build some confidence, the questions in the exam were more difficult but the format and nature of these give you a good idea of what to expect.
Hope this advice helps some of you – onto the AZ-104!
Testimonial: AZ900 – Passed – some notes
Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF
Just passed with a 970. I used a combination of:
1. ITProTV – good training overviews but useless practice tests. Utterly not even close to the exam.
2. Udemy and Whizlabs – VERY close to what is on the exam, highly recommend this.
3. TutorialsDojo – this was the closest to the actual test – if you can pass these tests you can pass the exam.
ANKI for terms and basic rules.
I studied way too much – make sure you know what each service does and how offerings differ
1. Availability Zones vs. Sets
2. Datacenters vs. Regions vs. Geographies
3. Where Compliance and Security information is done
4. Exactly what Azure Advisor can do, so you know what it can’t do.
5. The Difference between the DB offerings.
6. The difference between SaaS, IaaS and PaaS – really know this, multiple questions on it.
7. When you are charged for data transfer vs. when you are not.
Testimonial: Passed AZ104. Here is how i studied
Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF
So guys im not going to bore you with all the blah-blah-blah. Here is how you pass AZ104.
My background: Only az900 fundamentals ( no IT previous experience)
Learning Path
Step 1) DO all the MS Learn modules.
( if you get stuck on any chapter or portion use this playlist of videos from John Savill … he is amazing at explaining this stuff)
Step 2) Complete all the labs on github for az104
Step 3) Watch this cram video which will cement in the concepts
Study Material
Use tutorials dojo practice tests and do them until you reach 90+% Passing on average, Every question you get wrong make sure to read the explanation as to why you are wrong.
AZ-104 Microsoft Azure Administrator Practice Exams
Watch these YOutube follow alongs for 40 more practice questions with good explanations (parts 1-4)
Then you are ready to take the exam. Good luck everyone!
Azure Services Cheat Sheet
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech
Use the following flowchart to select a candidate compute service.
Definitions:
- “Lift and shift” is a strategy for migrating a workload to the cloud without redesigning the application or making code changes. Also called rehosting. For more information, see Azure migration center.
- Cloud optimized is a strategy for migrating to the cloud by refactoring an application to take advantage of cloud-native features and capabilities.
- App Service. A managed service for hosting web apps, mobile app back ends, RESTful APIs, or automated business processes.
- Azure Kubernetes Service (AKS). A managed Kubernetes service for running containerized applications.
- Batch. A managed service for running large-scale parallel and high-performance computing (HPC) applications
- Container Instances. The fastest and simplest way to run a container in Azure, without having to provision any virtual machines and without having to adopt a higher-level service.
- Functions. A managed FaaS service.
- Service Fabric. A distributed systems platform that can run in many environments, including Azure or on premises.
- Virtual machines. Deploy and manage VMs inside an Azure virtual network.
- Infrastructure-as-a-Service (IaaS) lets you provision individual VMs along with the associated networking and storage components. Then you deploy whatever software and applications you want onto those VMs. This model is the closest to a traditional on-premises environment, except that Microsoft manages the infrastructure. You still manage the individual VMs.
- Platform-as-a-Service (PaaS) provides a managed hosting environment, where you can deploy your application without needing to manage VMs or networking resources. Azure App Service is a PaaS service.
- Functions-as-a-Service (FaaS) goes even further in removing the need to worry about the hosting environment. In a FaaS model, you simply deploy your code and the service automatically runs it. Azure Functions are a FaaS service.
There is a spectrum from IaaS to pure PaaS. For example, Azure VMs can autoscale by using virtual machine scale sets. This automatic scaling capability isn’t strictly PaaS, but it’s the type of management feature found in PaaS services.
Azure Data Store:
Use the following flowchart to select a candidate data store.
Which of the following choices isn’t a cloud computing category: NAAS, PAAS, SAAS, IAAS, DAAS?
– Networking-as-a-Service (NaaS)
– NaaS isn’t a cloud computing category.
Download Azure Fundamentals AZ900 Certification Exam Prep
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech
Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF
Azure Fundamentals AZ900 Exam Prep on iOs
Azure Fundamentals AZ900 Exam Prep on android
Azure Fundamentals AZ900 Exam Prep on Windows 10/11
Azure Fundamentals AZ900 Exam Prep on Web/PWA
Updates to AZ-900 Coming May 5th 2022
[AZ-900](Exam AZ-900: Microsoft Azure Fundamentals – Learn)
Under skills measured section:
The English language version of this exam will be updated on May 5, 2022. Please download the exam skills outline below to see what’s changing.
To be honest seems like decent set of changes. In addition to reshuffling existing titles and task #s of several items, there is a redistribution of weight across objectives and removing of following sections:
3.1 Describe core solutions available in Azure
5.3 Describe privacy and compliance resources
6.2 Describe Azure Service Level Agreements (SLAs)
Top-paying Cloud certifications:
- Google Certified Professional Cloud Architect — $175,761/year
- AWS Certified Solutions Architect – Associate — $149,446/year
- Azure/Microsoft Cloud Solution Architect – $141,748/yr
- Google Cloud Associate Engineer – $145,769/yr
- AWS Certified Cloud Practitioner — $131,465/year
- Microsoft Certified: Azure Fundamentals — $126,653/year
- Microsoft Certified: Azure Administrator Associate — $125,993/year
Sources:
Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF
Azure Fundamentals AZ900 Exam Prep on iOs
Azure Fundamentals AZ900 Exam Prep on android
Azure Fundamentals AZ900 Exam Prep on Windows 10/11
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech
Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF
Azure Fundamentals AZ900 Exam Prep on iOs
Azure Fundamentals AZ900 Exam Prep on android
Azure Fundamentals AZ900 Exam Prep on Windows 10/11
Azure Fundamentals Breaking News – Azure Fundamentals Certifications Testimonials
- Azure Runbook - Hybrid Worker as elevated userby /u/adamncl (Microsoft Azure) on May 26, 2022 at 7:54 pm
I am trying to run my runbook on a hybrid worker as elevated user - the exe that it runs requires administrative permissions - has anyone managed to achieve this? submitted by /u/adamncl [link] [comments]
- DP-500 betaby /u/d2peak (Microsoft Azure Certifications) on May 26, 2022 at 7:51 pm
Hey, Has any one of you done the new azure analytics exam dp-500 ? I had the opportunity to request a beta exam voucher as im a MCT, but apparently i wasnt fast enough (i think MS only sent out 300 or so)... I would be really interested in how much it differs from the DA-100 and how hard the questions regarding topics different than power bi are. Any feedback is welcome! submitted by /u/d2peak [link] [comments]
- Taking AZ-900 here soonby /u/ItalianDon (Microsoft Azure Certifications) on May 26, 2022 at 7:26 pm
How accurate are questions in the Whizlabs in regards to the exam? submitted by /u/ItalianDon [link] [comments]
- How to automatically have users sign into Edge on hybrid-joined PC?by /u/Real_Lemon8789 (Microsoft Azure) on May 26, 2022 at 6:58 pm
I created a gpo with this setting: "Force synchronization of browser data and do not show the sync consent prompt" The group policy is applied, but the user is not getting signed into Edge automatically. User has E3 and P2. Are there any other requirements to get this working? submitted by /u/Real_Lemon8789 [link] [comments]
- MS Build Cloud Skills Challenge has started! Free voucher opportunity and information you may have missed.by /u/teriaavibes (Microsoft Azure Certifications) on May 26, 2022 at 6:54 pm
Hi guys, Cloud Skills have finally started (register here: Cloud Skills 2022 Registration). Eligible exams: AI-102: Designing and Implementing a Microsoft Azure AI Solution AZ-204: Developing Solutions for Microsoft Azure AZ-220: Microsoft Azure IoT Developer AZ-400: Designing and Implementing Microsoft DevOps Solutions DP-420: Designing and Implementing Cloud - Native Applications Using Microsoft Azure Cosmos DB MS-600: Building Applications and Solutions PL-100: Microsoft Power Platform App Maker PL-200: Microsoft Power Platform Functional Consultant PL-300: Microsoft Power BI Data Analyst SC-200: Microsoft Security Operations Analyst SC-300: Microsoft Identity and Access Administrator How does it work? You register and choose learning path suited to your preferred exam You complete all the modules included You will receive 1 voucher in your certification profile on June 30th that will expire by December 31st Some info I have from previous Challenges: One voucher per person Voucher limited to eligible exams (but you can take one learning path but use the voucher for another) MS Learn is often not enough for these harder exams so pair it up with learning materials of your choice. For anyone who is just entering the world of Microsoft Cloud Certifications I recommend checking out my post explaining the basics over here: Certification tips for new people and free voucher opportunities (if there is any no longer valid information inform me, Microsoft loves to change things that work) If you are looking for free fundamentals vouchers to start with all the info is in my previous post I linked and you can take exams: AZ, AI, DP, PL-900, MB-910, 920 and MS-700 for free (register for them over here Microsoft Virtual Training Days) Good luck certificating everyone! submitted by /u/teriaavibes [link] [comments]
- [Azure ACR] How can I delete untagged manifests?by /u/Thecakeisalie25 (Microsoft Azure) on May 26, 2022 at 6:48 pm
I've been brought on board a new project, and I'm looking at the ACR for it (it uses IoT edge) and it's taking up ~40GB. Before I got here, the dockerfile was arranged poorly, such that copying over the code was the first step, and so all other steps (apt update, install deps, etc) were never cached. That probably explains why it was so bloated, but why does it take up that much space NOW? I've deleted all the images from old (way old) versions of our modules, but the storage space doesn't go down. Even after I've deleted every single tagged image, it still takes up ~40GB, there's a bunch of manifests floating around in there that aren't tagged, and I want them to stop being there. Is there a way to do this? I've fixed the dockerfile so that new builds are only 7kb, so I only really need to purge it this once. submitted by /u/Thecakeisalie25 [link] [comments]
- Logic App - Get File Content File Size Limitby /u/phxkent (Microsoft Azure) on May 26, 2022 at 6:24 pm
After a year of working perfectly, I have a logic app that started to show inconsistencies. The app checks an FTP site for new files, gets the file metadata, gets the file content of the new file, saves the file content as a new blob, and sends an email when it has run. The problem appears to occur in the the "Get File Content" step. Prior to 5/1, the the process would process files greater than 10MB. As of 5/1/22, the Get file Content only copies 10 MB. Therefor the new blobs being created do not include all of the file content when the file is greater than 10MB. The process doesn't fail, it just doesn't copy all the contents. The file metadata step clearly shows that the file is greater than 10MB. Has anyone else experienced this? Is this a new change as of 5/1? Any way to fix this? submitted by /u/phxkent [link] [comments]
- Availability Setby /u/Sketchy011 (Microsoft Azure) on May 26, 2022 at 5:59 pm
Noob question, have Availability Sets always just protected against data center failure and nothing more? If so, is there anything where I can replicate to zones to cover that issue? submitted by /u/Sketchy011 [link] [comments]
- PIM Global Administrator group - Users at risk detected alerts Not Workingby /u/Cloud_Comp_Admin (Microsoft Azure) on May 26, 2022 at 4:19 pm
We're testing out PIM and are having issues with notifications. In Azure, the Risky notifications aren't going to a PIM group created to assign the Global Administrator role. We have two users in this group, and two people with the access directly assigned and aren't in PIM. The two people with the access directly assigned are getting the notifications. I confirmed in the Users at risk detected alerts have the two people with the Global administrator role directly assigned to them, but not hose with the PIM group. According to the page in Security -> Identity Protection -> Users at risk detected alerts: " If a user is enrolled in PIM to elevate to one of these roles on demand then they will only receive emails if they are elevated at the time the email is sent. The Admin's configured email must be able to pass the validation checks for custom emails on the "Users at risk detected alerts" page." I'm not sure what "The Admin's configured email must be able to pass the validation checks for custom emails on the "Users at risk detected alerts" page." means since when the two users with the PIM Global Administrator group currently assigned to them were getting emails when they had the Global Administrator role directly assigned to them . Checked the page: Azure Active Directory Identity Protection notifications | Microsoft Docs which didn't help. Any guidance is much appreciated, thanks in advance for the advice! submitted by /u/Cloud_Comp_Admin [link] [comments]
- SharePoint Cert?by /u/aravena (Microsoft Azure Certifications) on May 26, 2022 at 4:03 pm
I know they got rid of it but within Azure, what is there? I was just hired as a SharePoint Admin and was told to get a cert. nothing even specific. I'm looking through and it has to at least be an Associate so I may get the AZ900 anyhow, it's not enough. Anything out there that will help and be kinda basic enough to get through? I'm fresh to Azure but 10yrs IT experience. Thanks in advance! submitted by /u/aravena [link] [comments]
- General availability: Enhanced IPv6 functionality for MultiValue profiles in Azure Traffic Managerby Azure service updates on May 26, 2022 at 4:00 pm
Azure Traffic Manager now enables you to specify minimum children property separately for IPv4 and IPv6 endpoints for MultiValue profiles.
- Azure AD for mobileby /u/LeonardoDaWitchy (Microsoft Azure) on May 26, 2022 at 3:58 pm
Hello all and thank you for looking at my post. I am developing a mobile app (cross platform) which requires users to authenticate. My organization would like to use Azure AD (we have enterprise license). Here’s my issue. It doesn’t appear that with Azure AD I can create my own custom login screen inside the app. I understand I can create custom login views from the azure portal or even upload my own html files etc. That’s all good but what I am trying to do is have a screen inside the app with two fields (username and password) and when the user taps on the sign in button they log in upon successful authentication. All I could find right now was in my app registration to use a callback url so essentially the user will exit the app, be taken to a browser window to login to AAD and then be redirected back to the app. I really would prefer to avoid such a scenario. Am I going about this the wrong way? Thanks in advance - Leo submitted by /u/LeonardoDaWitchy [link] [comments]
- Azure - Provisioning failedby /u/farchris (Microsoft Azure) on May 26, 2022 at 3:50 pm
Hello, I want to increase the tcp idle timeout but it's not possible because the vm is faulty (see attached image below). I tried the "Redeploy + reapply" option but it doesn't help. On a windows-system you can run "sysprep" via rdp but in this case it's a linux machine (CentOS) only with ssh-access. Does anyone know how can I remove the error? Thank you for your help! https://preview.redd.it/tnlixamicu191.png?width=1662&format=png&auto=webp&s=7f872aceb2c9a122acaa0c9ed5fec4d2f037d2e8 submitted by /u/farchris [link] [comments]
- Access a dashboard similar to how you use a sas tokenby /u/famelton (Microsoft Azure) on May 26, 2022 at 3:50 pm
We have an Azure dashboard that we would like to add to a wall TV for monitoring but I was wondering if you could get "secure/authenticated" access in the same way a sas token works against a storage account to give read only live access? submitted by /u/famelton [link] [comments]
- Study guides for AZ-140 Examby /u/Investigator7675 (Microsoft Azure Certifications) on May 26, 2022 at 3:02 pm
Anyone here know of good study guides for AZ-140 exam (https://docs.microsoft.com/en-us/learn/certifications/exams/az-140) ? I am looking for legitimate sources. I tried whizlabs once and it was just okay. Anyone have any suggestions of ones they used in the past? submitted by /u/Investigator7675 [link] [comments]
- Azure Firewall integration with Internal Load Balancerby /u/0x4ddd (Microsoft Azure) on May 26, 2022 at 2:32 pm
Another question about Azure Firewall 😉 I thought I understand how Azure Firewall integration with Public/Internal Load Balancer works but I think I miss something. Docs (https://docs.microsoft.com/en-us/azure/firewall/integrate-lb#asymmetric-routing) show some diagrams how the traffic flows when there is a Public Load Balancer and Azure Firewall and how to integrate these two together. Asymmetric routing is where a packet takes one path to the destination and takes another path when returning to the source. This issue occurs when a subnet has a default route going to the firewall's private IP address and you're using a public load balancer. In this case, the incoming load balancer traffic is received via its public IP address, but the return path goes through the firewall's private IP address. Since the firewall is stateful, it drops the returning packet because the firewall isn't aware of such an established session. Diagram: https://docs.microsoft.com/en-us/azure/firewall/media/integrate-lb/firewall-lb-asymmetric.png I think I understand this part and the necessity for DNAT rule. My understanding (numbers are flows shown on the diagram). Client makes a request to Azure Firewall Source IP: Client IP Destination IP: FW PiP Firewall DNATs and SNATs to Public Load Balancer Source IP: FW PiP Destination IP: LB PiP Public Load Balancer routes traffic to VM Private IP Source IP: FW PiP (as I understand, Azure Load Balancer always preserves Source IP) Destination IP: VM Private IP VM responds Source IP: VM Private IP Destination IP: FW PiP UDR routes flow to the Internet via FW PiP instead of routing it to FW Private IP Source IP: FW PiP Destination IP: Client IP So far so good. However, next docs describe how to integrate Azure Firewall with Internal Load Balancer: With an internal load balancer, the load balancer is deployed with a private frontend IP address. There's no asymmetric routing issue with this scenario. The incoming packets arrive at the firewall's public IP address, get translated to the load balancer's private IP address, and then returns to the firewall's private IP address using the same return path. And here I do not really understand why there's no asymmetrc routing with this scenario. What's the difference? Isn't it like I need a DNAT rule anyway in the step 2 to translate to Internal LB IP and then wherever I had LB PiP in the previous scenario now I will have Internal LB IP? If so, I do not understand why there is no asymmetric routing as incoming traffic enters Firewall using Public IP and then it's routed to Firewall Private IP. submitted by /u/0x4ddd [link] [comments]
- Azure Zip deployment via AZ CLI very slow.by /u/spGT (Microsoft Azure) on May 26, 2022 at 2:00 pm
Recently my az function app deploy has stated taking 26 min. WARNING: Getting scm site credentials for zip deployment 21:31:16 WARNING: Starting zip deployment. This operation can take a while to complete ... 21:56:16 WARNING: Deployment endpoint responded with status code 202 21:56:24 INFO: Fetching changes. 21:56:28 INFO: Fetching changes. 21:56:38 INFO: Triggering recycle (preview mode disabled). 21:56:42 INFO: Command ran in 1550.888 seconds (init: 0.177, invoke: 1550.711) How can I debug the cause? I already have it set to verbose but it doesn't show much... submitted by /u/spGT [link] [comments]
- Best way to test connectivity from Azure WebApp to Azure SQLby /u/apdunshiz (Microsoft Azure) on May 26, 2022 at 1:14 pm
HI guys, I have a webapp that needs to connect to Azure SQL. I know that a private endpoint method works, but this can be costly since it costs $0.01/GB/Month, just for the data processed. I can telnet/tcpping the webapp from the console, or even the browser debug option, but this is not a valid test. From my understanding, you can telnet or TCP ping on 1433 to ANY Azure SQL connection URL, if public access is allowed, but then it will sift through the whitelisted public IPs after that. Meaning, you will always get a response unless you specifically deny public access. I have added my webapp to an outbound integration subnet, added the SQL Service Endpoint to that subnet, and cannot see any errors in the logs but am not sure if I am 100% connected. I am not familiar with the actual webapp or what database does what (that is on someone else)... my job is to just make sure connectivity is there. Thanks in advanced! submitted by /u/apdunshiz [link] [comments]
- Passed Az-500by /u/jonsey39 (Microsoft Azure Certifications) on May 26, 2022 at 12:49 pm
Passed the Az-500 last night. Bit of an odd one, I was getting stressed and demotivated at how hard the syllabus is and wanted to gauge how hard the exam actually is - it's got a rep as a very hard exam. Work pay for exams so I though best not get stressed, just have a demo sit through to see what it's like - no real expectation to pass. Exam was awful. On the 104 everything seemed quite fair as in you did not need to know specifics for many things, you needed to know the different between a load balances and app gateway, but not the entire different matrix between the SKU's. A lot of questions in this exam were like that, very very specific in nature. Also, a lot of things I could not even vaguely remember from the course prep, it was not like I remember reading it but the specific number had eluded me, I did not recognise the whole point of the question. Anyway, as it was a dummy run I did not put too much pressure on myself, I gave it a good pop but I was not getting stressed. I would say 1/3 of the exam I was confident in my answer, 1/3 was a 50/50 and 1/3 a complete and utter guess. This is a bad ratio. Finished the exam with 0% confidence I would pass, I was disheartened it had gone so badly. Low and behold passed in the high 700's. I have no idea how this happened, my only guess is that I got lucky with the weighting or something like that, no chance at all I got 80% of those questions correct. I used Az-500 official study guide, put these into remonote then practiced the flash cards, usual Youtube vids and Whizlabs for questions. The official exam labsd as well. It's hard to say if these are good tools as I feel I passed through luck rather than skill Anyway - say it with me "A pass is a pass" - chuffed I passed it but feel the exam experience was not great. Did not have the good experience feeling coming out of the 104. Good luck all future test takers! submitted by /u/jonsey39 [link] [comments]
- Why Does Guest Login Requires Printer Setup Each Timeby /u/BBQingFool (Microsoft Azure) on May 26, 2022 at 12:48 pm
We have a guest login with no password setup on about 100 computers that auto deletes and resets things when that account logs off. However, it also resets the printer that is needed by our clients, so each new login requires the user to double click the printer and install it. Is there a way to have that printer installed permanently to avoid this? Appreciate any thoughts/advice. submitted by /u/BBQingFool [link] [comments]
#Azure #AzureFundamentals #AZ900 #AzureTraining #LeranAzure #Djamgatech
Azure Fundamentals AZ900 Exam Prep on Udemy – 50-% OFF
Azure Fundamentals AZ900 Exam Prep on iOs
Azure Fundamentals AZ900 Exam Prep on android
Azure Fundamentals AZ900 Exam Prep on Windows 10/11
