Azure resource management, virtual networking, and identity concepts tested on the Azure Administrator Associate exam, beyond the Fundamentals level.
43 cards · basic cards · AI-written, checked twice. Edit anything.
- What is an Azure Resource Group?
- A logical container that holds related Azure resources for an application or solution, enabling management and access control at the group level.
- Can you delete a Resource Group if it contains resources?
- Yes, deleting a Resource Group automatically deletes all resources contained within it.
- What determines the location of a Resource Group?
- A Resource Group is assigned a location (region) when created, which stores metadata about the group and its resources.
- What is a Virtual Network (VNet) in Azure?
- A logically isolated network in Azure that allows Azure resources to communicate securely with each other, the internet, and on-premises networks.
- What is a subnet in Azure?
- A range of IP addresses within a Virtual Network, used to segment the network and control traffic between resources.
- What is a Network Security Group (NSG)?
- A firewall that contains inbound and outbound security rules to allow or deny network traffic to resources.
- Can an NSG be applied to both subnets and individual network interfaces?
- Yes, NSGs can be applied at both the subnet level (affects all resources in that subnet) and the NIC level (affects only that resource).
- What is an Application Security Group (ASG)?
- A logical grouping of resources that allows you to apply security rules based on application tier rather than explicit IP addresses.
- What are the default deny behaviors for NSG rules?
- By default, all inbound traffic is denied and all outbound traffic is allowed, unless explicit rules permit it.
- What is Azure Virtual Machine Scale Sets?
- A service that allows you to create and manage a group of identical load-balanced virtual machines that automatically scale based on demand.
- What is a Storage Account in Azure?
- A managed service that provides scalable cloud storage for data objects, supporting Blob, Queue, Table, and File storage.
- What does RBAC stand for in Azure?
- Role-Based Access Control, a system for managing who can access Azure resources and what actions they can perform.
- What are the three elements of an Azure RBAC role assignment?
- Security principal (who), role definition (what permissions), and scope (where the permissions apply).
- What is a built-in role in Azure RBAC?
- A pre-defined role provided by Azure (such as Owner, Contributor, Reader) with a fixed set of permissions that cannot be modified.
- What is a custom role in Azure RBAC?
- A user-defined role that you create with a specific set of permissions tailored to your organization's needs.