Azure resource management, virtual networking, and identity concepts tested on the Azure Administrator Associate exam, beyond the Fundamentals level.
45 cards · basic cards · AI-written, checked twice. Edit anything.
- What is an Azure Resource Group?
Show answer
A logical container that holds related Azure resources for an application or solution, enabling management and access control at the group level.- Can you delete a Resource Group if it contains resources?
Show answer
Yes, deleting a Resource Group automatically deletes all resources contained within it.- What determines the location of a Resource Group?
Show answer
A Resource Group is assigned a location (region) when created, which stores metadata about the group and its resources.- What is a Virtual Network (VNet) in Azure?
Show answer
A logically isolated network in Azure that allows Azure resources to communicate securely with each other, the internet, and on-premises networks.- What is a subnet in Azure?
Show answer
A range of IP addresses within a Virtual Network, used to segment the network and control traffic between resources.- What is a Network Security Group (NSG)?
Show answer
A firewall that contains inbound and outbound security rules to allow or deny network traffic to resources.- Can an NSG be applied to both subnets and individual network interfaces?
Show answer
Yes, NSGs can be applied at both the subnet level (affects all resources in that subnet) and the NIC level (affects only that resource).- What is an Application Security Group (ASG)?
Show answer
A logical grouping of resources that allows you to apply security rules based on application tier rather than explicit IP addresses.- What are the default deny behaviors for NSG rules?
Show answer
By default, all inbound traffic is denied and all outbound traffic is allowed, unless explicit rules permit it.- What is Azure Virtual Machine Scale Sets?
Show answer
A service that allows you to create and manage a group of identical load-balanced virtual machines that automatically scale based on demand.- What is a Storage Account in Azure?
Show answer
A managed service that provides scalable cloud storage for data objects, supporting Blob, Queue, Table, and File storage.- What does RBAC stand for in Azure?
Show answer
Role-Based Access Control, a system for managing who can access Azure resources and what actions they can perform.- What are the three elements of an Azure RBAC role assignment?
Show answer
Security principal (who), role definition (what permissions), and scope (where the permissions apply).- What is a built-in role in Azure RBAC?
Show answer
A pre-defined role provided by Azure (such as Owner, Contributor, Reader) with a fixed set of permissions that cannot be modified.- What is a custom role in Azure RBAC?
Show answer
A user-defined role that you create with a specific set of permissions tailored to your organization's needs.
FlashKeepers