Microsoft Azure Administrator (AZ-104)
-Az module - ANS-A newer replacement for -AzureRM module, this is the formal name for the
Azure PowerShell module containing cmdlets to work with Azure features. It contains hundreds
of cmdlets that let you control nearly every aspect of every Azure resource. You can work with
the following features, and more:
- Resource groups
- Storage
- VMs
- Azure AD
- Containers
- Machine learning
This module is an open-source component available on GitHub.
-ServiceEndpoint flag - ANS-will usually be followed by a type designation such as
"Microsoft.Storage" or "Microsoft.Sql"
%WINDIR%\Setup\Scripts\ErrorHandler.cmd - ANS-This script runs automatically when Setup
encounters a fatal error. It runs with local system permission.
%WINDIR%\Setup\Scripts\SetupComplete.cmd - ANS-- This script runs with local system
permissions and starts immediately after the user sees the desktop
- If you have PowerShell scripts to automate the configuration of newly created VMs
<BlobPath> (Azure Import/Export service) - ANS-used to specify the exact path to a blob file
<BlobPathPrefix> (Azure Import/Export service) - ANS-used to specify all files and folder that
will be exported
a trailing slash ( i.e. /vhds/ ) means that everything insude the folder will be exported without
exclusion
no trailing slash ( i.e. /movies/dramas ) means that everything starting with dramas as a prefix
will be exported
$schema (ARM template schema) - ANS-Location of the JSON schema file that describes the
version of the template language.
Required
$vm | Remove-AzNetworkInterface -Force - ANS-delete a network interface
,A new project has several resources that need to be administered together. Which of the
following would be a good solution? - ANS-Azure resource groups
A Policy Definition expresses what to evaluate and what actions to take. Every policy definition
has - ANS-conditions under which it is enforced. And, it has an accompanying effect that takes
place if the conditions are met
For example, you could prevent VMs from being deployed if they are exposed to a public IP
address.
A project in Azure DevOps contains the following set of features: - ANS-- Boards and backlogs
for agile planning
- Repos for version control and management of source code and artifacts
- Pipelines for continuous integration and deployment
- Test Plans for continuous test integration throughout the project life cycle
A subscription can be moved between management groups provided that the user has
______________ - ANS-proper RBAC privileges
AAAA record - ANS-The DNS record that maps a hostname to a 128-bit
IPv6 address. This is also known as the IPv6 address record.
Access Reviews - ANS-Very often people change roles, get new permissions and never lose old
permissions. Enables review on:
- Group membership
- App assignment
- Role assignment
Review can be done by admins, delegated people or self-review
Access token - ANS-Created when a user logs on, this value identifies the user and all of the
user's group memberships. Like a club membership card, it verifies a user's permissions when
the user attempts to access a local or network resource.
Account SAS - ANS-is secured with the storage account key and delegates access to resources
in one or more of the storage services. All of the operations available via a service or user
delegation SAS are also available here.
You can also delegate access to the following:
- Service-level operations (For example, the Get/Set Service Properties and Get Service Stats
operations).
- Read, write, and delete operations that aren't permitted with a service SAS.
,Active Directory User - ANS-Represents an identity for a person or employee in your domain.
They have login credentials and can use them to log into the Azure Portal. Belongs to your
organization and a guest belongs to another organization.
ad hoc shared access signature (SAS) - ANS-The start time, expiry time, and permissions are
specified in the SAS URI. Any type of SAS can be an ad hoc SAS
A user delegation SAS or an account SAS must be an ad hoc SAS. Stored access policies are
not supported for the user delegation SAS (for blob storage only) or the account SAS
AD User administration - ANS-- Assign roles and admin roles
- Add users to groups
- Enforce authentication methods such as Multi-Factor Authentication (MFA)
- Track user sign-ins
- Track devices user's login from and allow/deny devices
- Assign Microsoft license
Add-AzVhd cmdlet - ANS-uploads on-premises virtual hard disks, in .vhd file format, to a blob
storage account as fixed virtual hard disk
Add-AzVMNetworkInterface cmdlet - ANS-- Used to add a network interface to an existing VM
but does not have options for configuring static IP addresses
Administrative units - ANS-can limit the scope of roles to a subset of users (and groups)
Administrative Units (Azure AD) - ANS-- It can be useful to restrict administrative scope by using
these in organizations that are made up of independent divisions of any kind
- Think about a large university that's made up of many autonomous schools (School of
Business, School of Engineering, and so on)
After moving a disk from VM1 to VM2, you must do the following in PowerShell __________ -
ANS-run the Update-AzVM
All VM networking must be ________ - ANS-configured from outside of the virtual machine's OS
Always use parameters for - ANS-usernames and passwords (or secrets)
An Azure free subscription includes: - ANS-- a monetary credit to spend on any service for the
first 30 days
- free access to the most popular Azure products for 12 months
- access to more than 25 products that are always free
An Azure Resource Manager (ARM) template - ANS-a JavaScript Object Notation (JSON) file
that defines the infrastructure and configuration for your project
, An Azure subscription can be associated to ________ - ANS-multiple Azure Active Directory
(Azure AD) tenants but only one Azure AD instance
An initiative definition is __________________ - ANS-a set of Policy Definitions to help track
your compliance state for a larger goal.
For example, ensuring a branch office is compliant.
Another Administrator is managing Azure locally using PowerShell. They have launched
PowerShell as an Administrator. Which of the following commands should be executed first? -
ANS-Connect-AzAccount. The first thing to do is to connect to Azure and provide the user
credentials to log in.
apiProfile (ARM template) - ANS-An optional section that defines a collection of API versions for
resource types. You can use this value to avoid having to specify API versions for each resource
in the template.
App1 has the deployment slots shown in the following table:
webapp1-prod = Production
webapp1-test = Staging
In webapp1-test, you test changes to App1. You back up App1. You swap webapp1-test for
webapp1-prod and discover that App1 is experiencing performance issues. You need to revert
to the previous version of App1 as quickly as possible.
What should you do? - ANS-Swap the slots
When you swap the deployment slots, Azure swaps the virtual IP addresses of source and
destination slots therefore swapping the URLs of the slots as well
Append (Azure Policy effects) - ANS-used to add additional fields to the requested resource
during creation or update.
A common example is specifying allowed IPs for a storage resource
ARM templates are: - ANS-linkable and simplify orchestration
ARM templates for deployments can be found at ___________ - ANS-The overview page of the
resource group
ARM templates from a deployment only contain the following: - ANS-- ARM template
- parameters file
-Az module - ANS-A newer replacement for -AzureRM module, this is the formal name for the
Azure PowerShell module containing cmdlets to work with Azure features. It contains hundreds
of cmdlets that let you control nearly every aspect of every Azure resource. You can work with
the following features, and more:
- Resource groups
- Storage
- VMs
- Azure AD
- Containers
- Machine learning
This module is an open-source component available on GitHub.
-ServiceEndpoint flag - ANS-will usually be followed by a type designation such as
"Microsoft.Storage" or "Microsoft.Sql"
%WINDIR%\Setup\Scripts\ErrorHandler.cmd - ANS-This script runs automatically when Setup
encounters a fatal error. It runs with local system permission.
%WINDIR%\Setup\Scripts\SetupComplete.cmd - ANS-- This script runs with local system
permissions and starts immediately after the user sees the desktop
- If you have PowerShell scripts to automate the configuration of newly created VMs
<BlobPath> (Azure Import/Export service) - ANS-used to specify the exact path to a blob file
<BlobPathPrefix> (Azure Import/Export service) - ANS-used to specify all files and folder that
will be exported
a trailing slash ( i.e. /vhds/ ) means that everything insude the folder will be exported without
exclusion
no trailing slash ( i.e. /movies/dramas ) means that everything starting with dramas as a prefix
will be exported
$schema (ARM template schema) - ANS-Location of the JSON schema file that describes the
version of the template language.
Required
$vm | Remove-AzNetworkInterface -Force - ANS-delete a network interface
,A new project has several resources that need to be administered together. Which of the
following would be a good solution? - ANS-Azure resource groups
A Policy Definition expresses what to evaluate and what actions to take. Every policy definition
has - ANS-conditions under which it is enforced. And, it has an accompanying effect that takes
place if the conditions are met
For example, you could prevent VMs from being deployed if they are exposed to a public IP
address.
A project in Azure DevOps contains the following set of features: - ANS-- Boards and backlogs
for agile planning
- Repos for version control and management of source code and artifacts
- Pipelines for continuous integration and deployment
- Test Plans for continuous test integration throughout the project life cycle
A subscription can be moved between management groups provided that the user has
______________ - ANS-proper RBAC privileges
AAAA record - ANS-The DNS record that maps a hostname to a 128-bit
IPv6 address. This is also known as the IPv6 address record.
Access Reviews - ANS-Very often people change roles, get new permissions and never lose old
permissions. Enables review on:
- Group membership
- App assignment
- Role assignment
Review can be done by admins, delegated people or self-review
Access token - ANS-Created when a user logs on, this value identifies the user and all of the
user's group memberships. Like a club membership card, it verifies a user's permissions when
the user attempts to access a local or network resource.
Account SAS - ANS-is secured with the storage account key and delegates access to resources
in one or more of the storage services. All of the operations available via a service or user
delegation SAS are also available here.
You can also delegate access to the following:
- Service-level operations (For example, the Get/Set Service Properties and Get Service Stats
operations).
- Read, write, and delete operations that aren't permitted with a service SAS.
,Active Directory User - ANS-Represents an identity for a person or employee in your domain.
They have login credentials and can use them to log into the Azure Portal. Belongs to your
organization and a guest belongs to another organization.
ad hoc shared access signature (SAS) - ANS-The start time, expiry time, and permissions are
specified in the SAS URI. Any type of SAS can be an ad hoc SAS
A user delegation SAS or an account SAS must be an ad hoc SAS. Stored access policies are
not supported for the user delegation SAS (for blob storage only) or the account SAS
AD User administration - ANS-- Assign roles and admin roles
- Add users to groups
- Enforce authentication methods such as Multi-Factor Authentication (MFA)
- Track user sign-ins
- Track devices user's login from and allow/deny devices
- Assign Microsoft license
Add-AzVhd cmdlet - ANS-uploads on-premises virtual hard disks, in .vhd file format, to a blob
storage account as fixed virtual hard disk
Add-AzVMNetworkInterface cmdlet - ANS-- Used to add a network interface to an existing VM
but does not have options for configuring static IP addresses
Administrative units - ANS-can limit the scope of roles to a subset of users (and groups)
Administrative Units (Azure AD) - ANS-- It can be useful to restrict administrative scope by using
these in organizations that are made up of independent divisions of any kind
- Think about a large university that's made up of many autonomous schools (School of
Business, School of Engineering, and so on)
After moving a disk from VM1 to VM2, you must do the following in PowerShell __________ -
ANS-run the Update-AzVM
All VM networking must be ________ - ANS-configured from outside of the virtual machine's OS
Always use parameters for - ANS-usernames and passwords (or secrets)
An Azure free subscription includes: - ANS-- a monetary credit to spend on any service for the
first 30 days
- free access to the most popular Azure products for 12 months
- access to more than 25 products that are always free
An Azure Resource Manager (ARM) template - ANS-a JavaScript Object Notation (JSON) file
that defines the infrastructure and configuration for your project
, An Azure subscription can be associated to ________ - ANS-multiple Azure Active Directory
(Azure AD) tenants but only one Azure AD instance
An initiative definition is __________________ - ANS-a set of Policy Definitions to help track
your compliance state for a larger goal.
For example, ensuring a branch office is compliant.
Another Administrator is managing Azure locally using PowerShell. They have launched
PowerShell as an Administrator. Which of the following commands should be executed first? -
ANS-Connect-AzAccount. The first thing to do is to connect to Azure and provide the user
credentials to log in.
apiProfile (ARM template) - ANS-An optional section that defines a collection of API versions for
resource types. You can use this value to avoid having to specify API versions for each resource
in the template.
App1 has the deployment slots shown in the following table:
webapp1-prod = Production
webapp1-test = Staging
In webapp1-test, you test changes to App1. You back up App1. You swap webapp1-test for
webapp1-prod and discover that App1 is experiencing performance issues. You need to revert
to the previous version of App1 as quickly as possible.
What should you do? - ANS-Swap the slots
When you swap the deployment slots, Azure swaps the virtual IP addresses of source and
destination slots therefore swapping the URLs of the slots as well
Append (Azure Policy effects) - ANS-used to add additional fields to the requested resource
during creation or update.
A common example is specifying allowed IPs for a storage resource
ARM templates are: - ANS-linkable and simplify orchestration
ARM templates for deployments can be found at ___________ - ANS-The overview page of the
resource group
ARM templates from a deployment only contain the following: - ANS-- ARM template
- parameters file
