SANS SEC542 Book 1 UPDATED Exam
Questions and CORRECT Answers
region - CORRECT ANSWER - A set of datacenters deployed within a latency-defined
perimeter and connected through a dedicated regional low-latency network.
flexibility to deploy applications where you need to, including across multiple regions to deliver
cross-region resiliency
there are some restricted regions.
An Azure region contains one or more data centers that are connected by using a low-latency
network
geography - CORRECT ANSWER - An area of the world containing at least one Azure
region. Geographies define a discrete market that preserve data residency and compliance
boundaries. Geographies allow customers with specific data-residency and compliance needs to
keep their data and applications close. Geographies are fault-tolerant to withstand complete
region failure through their connection to our dedicated high-capacity networking infrastructure.
Availability Zone - what is it, what does it provide, used for? - CORRECT ANSWER --
Unique physical locations within a region.
-Each zone = one or more datacenters
-high-availability offering that protects apps from datacenter failure using physical separation of
Availability Zones within a region
-Zone-redundant services replicate your applications and data across Availability Zones to
protect from single-points-of-failure.
-Availability Zones, Azure offers industry best 99.99%
-An Availability Zone in an Azure region is a combination of a fault domain and an update
domain.
-if you create three or more VMs across three zones in an Azure region, your VMs are effectively
distributed across three fault domains and three update domains
,-Availability zone in Azure is used for replicating the applications and data within an Azure
region only
Recommended region - CORRECT ANSWER - A region that provides the broadest range
of service capabilities and is designed to support Availability Zones now, or in the future. These
are designated in the Azure portal as Recommended.
alternate (other) region - CORRECT ANSWER - A region that extends Azure's footprint
within a data residency boundary where a recommended region also exists. Alternate regions
help to optimize latency and provide a second region for disaster recovery needs. They are not
designed to support Availability Zones (although Azure conducts regular assessment of these
regions to determine if they should become recommended regions). These are designated in the
Azure portal as Other.
foundational service - CORRECT ANSWER - A core Azure service that is available in all
regions when the region is generally available.
mainstream service - CORRECT ANSWER - An Azure service that is available in all
recommended regions within 12 months of the region/service general availability or demand-
driven availability in alternate regions.
specialized service - CORRECT ANSWER - An Azure service that is demand-driven
availability across regions backed by customized/specialized hardware.
regional service - CORRECT ANSWER - An Azure service that is deployed regionally and
enables the customer to specify the region into which the service will be deployed. For a
complete list, see Products available by region.
non-regional service - CORRECT ANSWER - An Azure service for which there is no
dependency on a specific Azure region. Non-regional services are deployed to two or more
regions and if there is a regional failure, the instance of the service in another region continues
servicing customers. For a complete list, see Products available by region.
, Azure Active Directory - what is it, p2 sla, what happens if sla is not met? - CORRECT
ANSWER - not only way to authenticate to azure services, can also be guest user. or cloud
Premium p2 - guarantees 99.99 availability. all paying azure customers receive credit if sla is not
met.
Azure Free Accounts - CORRECT ANSWER - expire after 30 days.
Azure Subscriptions - CORRECT ANSWER - -only 1 account admin
-can not merge 2 subscriptions. instead you can transfer the ownership of a subscription to
another account
-cannot be associated with multiple AD tenants.
Public Preview - SLAs? - CORRECT ANSWER - -all services in public preview are
excluded from SLAs
Inbound Data Transfer - CORRECT ANSWER - inbound data transfer (into Azure) is
ALWAYS FREE,
Outbound Data Transfer - CORRECT ANSWER - -Not Free unless in same region or first
5gb in a month.
-Azure charges the user for the outbound data transfer and therefore it is NOT available for free -
"Outbound transfer - "from the region" is charged"
-For the same Azure Service, if it is in the same region, Azure does NOT charge the user for the
data transfer and is always available for free.
Resource Group - CORRECT ANSWER - -can access other resources in same resource
group
Tags - CORRECT ANSWER - They do not replicate down to child objects. they are only
on the objects you tag specifically.
Questions and CORRECT Answers
region - CORRECT ANSWER - A set of datacenters deployed within a latency-defined
perimeter and connected through a dedicated regional low-latency network.
flexibility to deploy applications where you need to, including across multiple regions to deliver
cross-region resiliency
there are some restricted regions.
An Azure region contains one or more data centers that are connected by using a low-latency
network
geography - CORRECT ANSWER - An area of the world containing at least one Azure
region. Geographies define a discrete market that preserve data residency and compliance
boundaries. Geographies allow customers with specific data-residency and compliance needs to
keep their data and applications close. Geographies are fault-tolerant to withstand complete
region failure through their connection to our dedicated high-capacity networking infrastructure.
Availability Zone - what is it, what does it provide, used for? - CORRECT ANSWER --
Unique physical locations within a region.
-Each zone = one or more datacenters
-high-availability offering that protects apps from datacenter failure using physical separation of
Availability Zones within a region
-Zone-redundant services replicate your applications and data across Availability Zones to
protect from single-points-of-failure.
-Availability Zones, Azure offers industry best 99.99%
-An Availability Zone in an Azure region is a combination of a fault domain and an update
domain.
-if you create three or more VMs across three zones in an Azure region, your VMs are effectively
distributed across three fault domains and three update domains
,-Availability zone in Azure is used for replicating the applications and data within an Azure
region only
Recommended region - CORRECT ANSWER - A region that provides the broadest range
of service capabilities and is designed to support Availability Zones now, or in the future. These
are designated in the Azure portal as Recommended.
alternate (other) region - CORRECT ANSWER - A region that extends Azure's footprint
within a data residency boundary where a recommended region also exists. Alternate regions
help to optimize latency and provide a second region for disaster recovery needs. They are not
designed to support Availability Zones (although Azure conducts regular assessment of these
regions to determine if they should become recommended regions). These are designated in the
Azure portal as Other.
foundational service - CORRECT ANSWER - A core Azure service that is available in all
regions when the region is generally available.
mainstream service - CORRECT ANSWER - An Azure service that is available in all
recommended regions within 12 months of the region/service general availability or demand-
driven availability in alternate regions.
specialized service - CORRECT ANSWER - An Azure service that is demand-driven
availability across regions backed by customized/specialized hardware.
regional service - CORRECT ANSWER - An Azure service that is deployed regionally and
enables the customer to specify the region into which the service will be deployed. For a
complete list, see Products available by region.
non-regional service - CORRECT ANSWER - An Azure service for which there is no
dependency on a specific Azure region. Non-regional services are deployed to two or more
regions and if there is a regional failure, the instance of the service in another region continues
servicing customers. For a complete list, see Products available by region.
, Azure Active Directory - what is it, p2 sla, what happens if sla is not met? - CORRECT
ANSWER - not only way to authenticate to azure services, can also be guest user. or cloud
Premium p2 - guarantees 99.99 availability. all paying azure customers receive credit if sla is not
met.
Azure Free Accounts - CORRECT ANSWER - expire after 30 days.
Azure Subscriptions - CORRECT ANSWER - -only 1 account admin
-can not merge 2 subscriptions. instead you can transfer the ownership of a subscription to
another account
-cannot be associated with multiple AD tenants.
Public Preview - SLAs? - CORRECT ANSWER - -all services in public preview are
excluded from SLAs
Inbound Data Transfer - CORRECT ANSWER - inbound data transfer (into Azure) is
ALWAYS FREE,
Outbound Data Transfer - CORRECT ANSWER - -Not Free unless in same region or first
5gb in a month.
-Azure charges the user for the outbound data transfer and therefore it is NOT available for free -
"Outbound transfer - "from the region" is charged"
-For the same Azure Service, if it is in the same region, Azure does NOT charge the user for the
data transfer and is always available for free.
Resource Group - CORRECT ANSWER - -can access other resources in same resource
group
Tags - CORRECT ANSWER - They do not replicate down to child objects. they are only
on the objects you tag specifically.
