Azure Fundamentals Exam

Azure Security Center- 3 functions

1. Provides monitoring, alerts, and recommendations for security risks for both Windows and Linux. 2. integrates with Defender to provide risk detection and assessments. 3. The center automatically discovers and assesses resources when you deploy them.

Which of the following describes an availability set? Choose all that apply a) protects against power, cooling, or other physical outages but requires distribution of additional instances to other AZ's to enable rolling updates. b) 2 or more VM instances deployed to the same availability set results in a 99.99% SLA. c) distributes VM instances across multiple fault and update domains to guard against outages caused by a data center outage and to enable VMs to be updated without making all instances in the set unavailable d) a and b

A Availability set is when you deploy at least 2 instances in a different AZ's within the same region. So for availability set, look for mention of AZ.

Your global organization hosts an intranet that serves training content in the for of videos/large drawing files used by service. These resources must be available to users in the US, Canada, UK, and France with minimal network latency. Which of the following options meets these requirements with minimal cost? A) use Azure Content Delivery Network to host files geographically close to your users b) Use VNet to Vnet connections between regions to enable to docs and videos to flow rapidly between regions c) use ExpressRoute to provide higher bandwidth for user connections d) None

A Think users in diff locations

Moving servers from an on-premises data center to VM's in Azure "enables you to reduce IT staffing b/c Microsoft manages the infrastructure for you." Is the quoted part true, or does it need to be replaced? a) Enables you to pay only for Azure resources you consume monthly b) represents a PaaS solution c) Enables you to use additional firewall services only available in Azure to protect against security risks d) no change

A VM's in Azure is a IaaS Solution

What is Azure App Service?

A PaaS that is designed to host web apps, allowing you to focus on the website and API logic while Azure takes care of the infrastructure to run and scale your web applications

Which of the following capabilities require an Azure AD Premium Edition? Choose all that apply a) Self service password management for on-premises users, enabling them to change their own passwords b) enabling users to access on-premises resources such as an on-premises website using an Azure AD account c) managing Azure AD groups d) using RBAC to control access to resources with policies and initiatives

A, B

Which of the following describes Azure DDoS Protection STandard? Choose all that apply. a) Protects against volumetric, protocol, and resource layer attacks b) alerts you when an attack is happeing c) DDoS Standard protects all resources on a virtual network as soon as service is enabled d) provides mitigation reports

A, B, C, D

Which of the following are correct statements regarding Azure Security Center? Choose all that apply. a) Security Center integrates natively with Microsoft Defender to provide risk detection and assessment b) Security Center supports Linux operating systems c) you must add resources to Security Center to begin monitoring these resources d) Security Center provides monitoring and threat protection for VMs in Azure as well as on premises.

A, B, D

Which of the following are correct about Azure policies? Choose all that apply a) YOu can apply policies individually to a resource or within an Azure initiative b) You can apply permissions using policies to determine what actions a user can take against a resource c) Applying a policy to resource group causes the policy to apply to all resources within that resource group d) Azure policies are a component of Security Center that lets you define security related policies to protect resources

A, C

Which of the following correctly describes Azure Active Directory? Choose all that apply. a) Azure AD is a key component of RBAC in Azure b) you must register an Azure web app with Azure AD to enable the app to authenticate and authorize users c) all editions of Azure AD enable management of users and groups d) you must use on-premises Active Directory and Azure AD to enable on-premises users to authenticate in Azure

A, C

Which of the following actively describes Azure Key Vault? Choose all that apply a) Provides the capability to create, manage, and store certifications and other secrets b) Provides highly secure storage for certificates and other keys but not the capability to create them c) Works in conjunction with Azure Threat Protection (ATP) to secure and contain certificate based threats d) enables app developers to avoid storing credentials in an application

A, D

You have deployed a VM to a subnet in Azure and need to ensure only you and 1 other person can connect to the VM using RDP on port 3389 to manage it. No other access from outside the subnet should be allowed at this time on any other ports. Which of the following should you use? Choose all that apply. a) Use a NSG to filter traffic and only allow port 3389 to the VM b) Apply an Azure policy to the subnet to limit access on port 3389 to only you and your peer's accounts c) create a policy initiative that restricts access to the server based on you and your peer's roles, and to port 3389 for the IP address of the VM d) Use RBAC to ensure only you and your peer can access the server.

A, D RBAC is used to restrict access. NSG filters traffic.

Contoso is building a web app using a SQL database to store data. Which of the following represents hybrid cloud? Choose all that apply a) a VM in Azure hosting the web app and a second virtual machine in Azure running SQL server b) a 2-node SQL cluster in a third-party data center hosting the data and 2 VM's in Azure running the web app c) A web app hosted in Azure that stores its data in an Azure SQL database d) a web app hosted in Azure that sends data to and from a database hosted in Contoso's on-premises data center

Answer: B and D Key words: third-party data center, on-premises data center

What is Azure SQL Database?

Azure SQL Database is a PaaS offering from Microsoft. You create a managed database server in the cloud, and then deploy your databases on this server.

Does the quoted part need to be changed? Azure initiatives "enable you to build blueprints to define how resources should be created & deployed in your Azure environment: a) Control how blueprints are published & assigned to resources b) enable you to manage and implement policies as a group to achieve governance goals c) define security policies that you apply using Azure security center d) nothing

B

You are moving to a SQL Server Analysis Services (SSAS) solution from on-premises to Azure to support custom reporting through Power BI. You want to enable access only when a report creator needs to query for data. Which Azure service supports just in time (JIT) access control, enabling users to gain access to the server for only a specified period of time? a) Advanced Threat Protection b) security center c) key vault d) service health

B

You are setting up resources in Azure and need to filter traffic based on source IP address and port, destination IP address and port, and protocol between on-premises network and Azure. Which meets these min requirements? a) ExpressRoute b) Azure Firewall c) Application security groups d) user defined routes

B

You need to delegate the capability to add users in Azure to another person in your organization. Which of the following RBAC roles should you apply to the user to provide this capability to manage management groups with least privilege? a) owner b) user access administrator c) contributor d) account administrator

B

You want to deploy a solution using SQL to store and retrieve data on sales managers, sales quotas, and seller attainment. You want to minimize cost and configuration effort. Which solution achieves this? a) Use CosmosDB to host data b) Use Azure SQL database to host data c) use VM with SQL server installed to host data d) None

B

You want to ensure the VMs created in a resource group don't exceed certain limits for cores and other resources to reduce costs. Which of the following Azure features let you control this a) resource locks b) Azure policies c) Azure Resource Manager d) Azure initiatives

B

You're an IT manager for a large bank. You propose moving some of the IT infrrastructure/services to Azure. You need to provide a secure, high-bandwidth connection from your primary data center to Azure, but the connection can't traverse the Internet. Which meets the requirements? a) Azure VPN Gateway b) Azure ExpressRoute Direct c) Azure ExpressRoute d) None

B ExpressRoute Direct is for regulated industries such as a large bank. CAN't TRAVERSE INTERNET.

Does the quoted part need to be changed? Your organization hosts its public website in Azure. You want to use URL path-based routing to accommodate processing for videos and images by sending traffic to server pools optimized for each content type.Your org operates globally and you want to ensure best possible performance regardless of where your consumers are. You should use "APPLICATION GATEWAY" as a load-balancing solution to meet these requirements. a) traffic manager b) front door c) azure load balancer d) no change

B Think front door for global routing capabilities.

You need to deploy a stateful app using Azure Container Instances. Which provides storage, enabling the app to store and retrieve persistent state? a) Azure Disk b) Azure Files c) Azure Blob d) Azure Archive

B Use Azure Files for Containers.

Which of the following is the cheapest option enabling Azure AD users to change their passwords online? a) Azure Active Directory base b) Azure Active Directory free c) Azure Active Directory Premium P1 d) Azure Active Directory Premium P3

B the 3 levels are free premium p1 and p2

3 access tiers of blob storage?

Blob storage is for large amount of unstructured data. hot access- for frequently accessed data cool access- optimized for infrequently access data for limited period of time archive access- for data you rarely access.

Blob storage vs disk storage vs file storage?

Blob storage: for large amounts of data for access in various ways (text data, for documents) disk storage: for virtual disks for VMs file storage: store files independently of a disk, good for containers.

Which Azure service provides security recommendations for securing your Azure resources? a) Advanced Threat Protection (ATP) b) Azure DDoS Protection c) Security Center d) Azure Service Health

C

Which of the following Azure services can identify suspicious activities such as pass the hash attacks? A) security center b) Azure Information protection (AIP) c) Azure Advanced Threat Protection (ATP) d) Microsoft Defender

C

Which of the following enable you to assign permissions to enable users to create and/or use resources in Azure? a) Azure policies b) Resource Groups c) RBAC d) Security Center

C

You need to deploy three VM's that will host an application. You want the VMs to reside in the same region, but you want to guard against power or other potential outages. You also have to ensure minimum latency between the instances. What option meets the requirements and is most cost effective? a) Deploy an additional set of three VMs to a diff region and use continual replication between the 2 regions, then fail over to the other region in event of outage b) place VM's in separate resource groups for the same region c) use separate AZs for the VMs d) use separate Availability sets for the VMs

C AZ's are often deployed across diff data centers in a region, and each zone has a separate update and fault domain. As they are in the same region, latency is minimized. Min latency- diff AZs for same region

Does the quoted part need to be changed? Applying a tag to a resource group "propagates the tag to all resources contained in the group" a) prevents resources in the resource group from being deleted if the tag is a CanNotDelete tag b) determines the actions that administrators can take on resources in the group c) applies tag only at container level d) no change

C CanNotDelete is a lock. Locks, not tags, prevent resource deletion.

Does the quoted part need to be changed? You're evaluating moving a web app that you host on-premises to Azure. The solution has 3 VM's: a web front end, an app server, and a database server. You need to ensure your administrators can access all of the VMs for remote management on port 3389, but only the web front end should be accessible over port 80. You decide to "deploy an application security group to protect the web server and enable access to the other services." a) deploy WAF to filter and route traffic to the web server and deploy network security groups to enable RDP to all 3 VMs b) deploy WAF to filter the traffic and meet both requirements c) deploy a network security group to filter traffic and meet both requirements d) no change

C WAF does not provide filtering but a NSG does!!

Your organization hosts a VM that performs a security-related function. For both security and auditing, you must ensure all traffic reaches the VM from a single IP address in another subnet, regardless of source. Which solution reaches this requirement? a) Create a NSG that directs all traffic for the VM to the designated IP address and then apply the NSG to all subnets as required b) Create a ASG that directs all traffic for the VM to the designated IP address and then apply the NSG to all subnets as required c) create a user defined route as a custom routing table and apply table to all subnets in the virtual network d) use rules in Azure Firewall to route traffic to the target VM based on source and target IP addresses

C We need a custom route.

You are deploying a web app in Azure and need to distribute traffic based on a single public IP address to the VMs that are hosting the database. Which satisfies the requirement? a) Azure Application Gateway b) Azure Traffic Manager c)Azure Load Balancer d) Azure Front Door

C think Virtual machines, traffic distribution

You deploy a custom data analytics app to Azure including a single web front end through which users access the app. At peak times during the day, the web server experiences high memory usage and temporarily enters an unresponsive state due to a bug in the app. As a stopgap measure while developers research the issue, you add a second web server and balance the load between the 2 web servers. While the service slows down sometimes, the servers can independently recover from the memory issue and the service remains available. Scaling out the web servers resulted in improvements in which TWO areas? a) disaster recovery b) agility c) fault tolerance d) high availability

C and D Scaling out leads to help with these

What are containers

Core azure service- enable you to roll out and manage VM instances tailored for specific uses

Does the quoted part need to be changed? Azure Information protection (AIP) "enables organizations to protect emails and docs using encryption, identity, and authorization policies" a) encrypts data stored in Azure Premium Storage b) provides secure storage for certificates, keys, and other secrets c) is a mechanism in Azure AD for encrypting and securing administrator credentials d) no change

D

Which of the following is designed to store nonstructured data and includes support for NoSQL? a) Azure SQL database b) Azure HDInsight c) Azure database for mysql d) Azure CosmosDB

D

You're considering migrating several SQL instances from on-premises to Azure. Which PaaS solution provides the best support for SQL and the easiest migration path? a) Azure Database for MySQL b) Azure SQL database c) Azure sql database premium d) SQL Managed Instance

D

As a consequence of organization changes requiring restructuring some of your IT infrastructure, you need to move VM's from one region to another. Which of the following methods is the easiest solution? a) back up VM, restore it to the new region, delete original VM b) move VM to a resource group located in the new region c) use Azure Resource Manager to move the resource to the new region d) configure site recovery between regions, migrate the VM to the new region using site recovery, and fail over to the new VM

D Fail over to move VM's from one region to another

You decide to use Azure Container Instances (ACI) to deploy containers as a part of project to deploy a new solution. Describe the benefits of using containers- what does NOT describe containers in Azure? a) Containers can run on windows or linux b) containers represent a single application and the app's dependencies c) all containers in a container group share the same operating system d) containers require setup and configuration of a virtual machine hosting them

D The primary benefit to using containers is the ease you can deploy them without having to set up a VM to host the app

Your organization maintains 2 on-premises data centers named Alpha and Bravo and you're considering moving some/all of the resources hosted in these data centers to Azure. As part of an Azure proof of concept, you need to establish a connection to Azure from a server named vmtest01 in data center Alpha. Which VPN solution meets the requirement for minimum setup and cost? a) ExpressRoute connection between Alpha and Azure b) multi-site VPN connection between Alpha, Bravo, and Azure c) site to site VPN from vmtest01 to Azure d) point to site VPN from vmtest01 to Azure

D You only need a connection from the server to azure, so point to site is most cost effective.

Your organization is building a hybrid Azure environment where several on-premises services need to interact with resources in Azure and vice versa over a secure connection. You require high speed connection through an encrypted tunnel across the Internet. This connection is managed by a 3rd party. What service does this scenario describe? a) azure Client VPN b) azure vpn gateway c) azure expressroute direct d) azure expressroute

D associated encrypted tunnel from on-premises to azure with expressroute

Azure Policies

Define business rules you can use to assess and ensure compliance w/organizational standards in Azure example: use policies to ensure only specific sizes of VMs are added to a resource group to control costs

Network Security Groups

Deployed at the subnet/VM level to provide traffic filtering at those levels. Often used in concert with application security groups Associate NSG with VM's often.

Application Security Groups

Enable you to group servers based on applications running on them and manage security for them as a group. An ASG is an object reference WITHIN a NSG, making it easy to apply rules to the VMs contained within an ASG

What is Azure Database for MySQL?

Gives you ability to deploy manage and use mySQL databases without having to deploy MySQL on a server/VM. Good for LAMP stack.

What is Azure Active Directory?

Is a cloud-based identity service. It has built in support for synchronizing with your existing on-premises Active Directory or can be used stand-alone.

Advanced Threat Protection (ATP)

Leverages on-premises AD to detect and identify threats directed at your org

What is Azure Sql Managed Instance

PaaS offering that enables organizations to move on premises SQL instances into Azure managed instance

What is PaaS?

Provides development platform to create and deploy web apps without worrying about deploying services/infrastructure. Example: web apps. NO deployment

What are resource groups?

Resource groups make it easy to group resources using the tags that are assigned to them.

What is fault tolerance?

Using redundant units to continue functioning when a system is failing

What is High Availability?

When a system can recover from failure quickly and efficiently and is designed to be able to return to service as soon as possible. NOTE: It does not provide uninterrupted service.

Web Application Firewall (WAF)

Works with application gateway, front door, and CDN and is specific to web application scenarios.

An Azure geography "always corresponds to a specific country". Does the quoted part need to be changed? a) corresponds to a single country or a market encompassing multiple countries b) determines where your resources can reside c) represents physical data centers d) no change

a

As a cloud service, Microsoft Azure enables your organization to budget IT infrastructure costs AS A CAPITAL EXPENDITURE Is the capitalized part true, or does it need to be replaced? a) as an operational expenditure b) on an annual basis c) using Azure Pricing Estimator d) no change

a

You're developing a solution in Azure that requires sending HTTPS traffic within a region to a specific endpoint based on requested URL. Which is the appropriate load balancing service? a) application gateway b) traffic manager c) load balancer d) front door

a Think application gateway for HTTPS based load balancing.

You deploy a web app using Azure App Services and configure autoscaling so it can request additional compute resources when the app experiences high increases in demand. What is this an example of? a) elasticity b) PaaS C) Fault Tolerance d) high availability

a associate elasticity with autoscaling.

You're a PM for a project to move several key web apps from on-premises to Azure. The dev team stated that support for LAMP is critical to simplifying the development effort. Which is most likely to support LAMP development? a) azure database for mysql b) Azure SQL Database c) azure CosmosDB d) Azure Database for PostgreSQL

a associate mySQL with LAMP

Your CIO suggests moving organization's resources to Azure to cut costs and improve availability and DR options. How do Azure subscriptions work? Choose all correct answers. a) an organization can have multiple Azure subscriptions associated with either the same or diff Azure AD tenants b) a subscription can contain resources only from a single region c) you can use azure multiple subscriptions to distribute costs to multiple groups within your organization d) a subscription can be moved to a new Azure AD tenant

a, c, d you can move around subscriptions

Azure China "is only available to Chinese gov't entities." Does the quoted part need to be changed? a) has less restrictive regulations than other Azure geographies b) is a physically isolated instance of Azure c) includes Azure services only available in China d) no change

b

You are an IT manager for a small company that hosts a web application for e-commerce. The web app uses 2 web servers and a small database cluster. As demand increases through a peak season you want to add additional web servers to handle the increased demand, then remove those additional servers as demand decreases. You propose moving the application to Azure. Which of the following statements is true? a) Web servers can be moved to Azure but the database cluster must remain on-premises, which represents a hybrid cloud model. b) horizontal scaling enables you to add and remove web servers to meet demand changes c) vertical scaling enables you to add and remove web servers to meet demand changes d) azure will automatically add the web servers for you as demand approaches a threshold set by Azure app service

b

You have set up a new Azure subscription and need to deploy storage to support a VM. What's the 1st thing you need to do to add storage? a) enable the subscription to support storage b) create a storage account c) choose the appropriate blob storage tier d) nothing b/c the VM includes blog hot access tier storage by default

b

You're considering deploying a key web app to Azure. You decide to deploy WAF with Application Gateway as part of the project. What correctly describes the function of WAF in this scenario? a) When properly configured it ensures traffic reaches application only on port 80 for HTTP traffic b) protects web app from common web based attacks c) ensures users can reach the web service on port 80 and administrators can RDP to the VMs on port 3389 d) none

b

You are an IT director for Contoso and are preparing a proposal for CIO to move all IT infrastructure to Azure. Which of the following is an advantage to moving our infrastructure to public cloud? a) You'll have complete control over all infrastructure, network, applications, and all other resources in cloud b) you can scale infrastructure horizontally or vertically without capital expenditure costs c) reduce operational expenditures d) cloud provider will manage all infrastructure for you, enabling Contoso to reduce IT staff.

b * Scaling infrastructure is benefit of cloud. Cloud moves you from capital to operatonal expenditure.

You are a server adminisrator for Wingtip toys, a small company. You manage a custom line of business app for order management. The solution is hosted on aging servers in a server room in your manufacturing facility. You want to move the app's functions to Microsoft dynamics 365 and eliminate the custom application. You propose that you first migrate servers to VM's hosted in Azure to avoid purchasing new hardware. The current app will run on these new VM's. What service category would this proposal be? a) SaaS b) IaaS c) PaaS d) hybrid cloud

b Hint: Think VM's

You are the CIO for a company and are concerned with data security in cloud. You need to implement cloud solution where you gain flexibility and agility of a cloud solution but maintain full control of your data and infrastructure. You propose to CEO that you contract with 3rd party cloud vendor to host IT services and the infrastructure on which your services will be hosted won't be used by any other organization. What cloud model is this? a) public cloud b) private cloud c) hybrid cloud d) both a and b

b services won't be used by any other organization

You are planning a deployment of resources in Azure of various types to support a new project and you want to use templates to simplify deployment and ensure the new resources are configured the same as existing Azure resources. Which one would you use? a) resource groups b) Azure Resource Manager c) Azure Resource Templates d) none

b think- templates to simplify deployment

You are the app development director for Contoso. Your team needs to develop and bring a new web app online quickly with minimal expense. You consider using Azure web apps, azure functions, and azure database for mysql. Which Azure service category does this represent? a) IaaS b) PaaS c) SaaS d) DaaS

b (PaaS) hint: Azure database for mysql is a PaaS, think web apps.

An Azure region _______. (choose all that apply) a) corresponds to a specific data center b) is paired with another region to help ensure high availability c) can span multiple countries d) specifies the location of Azure resources

b and d remember that a region is a GROUP of data centers. A region is WITHIN a geography.

Your organization has made the decision to move workloads to Azure. As the Directory Services Administrator, you need to explain authentication and authorization in Azure to the program managers leading the project. Which of the following are correct statements? a) identifying a user by username and password is a form of authorization b) validating that a user acct has the necessary permissions to access a resource is authorization c) authentication identifies a user but doesn't provide access to resources d) providing a password to access a shared resource is authorization

b, c

The cost per subscriber decreases as the number of Azure subscribers increases. Which benefit of cloud computing does this statement describe? a) agility b) scalability c) economy of scale d) elasticity

c

Which of the following is an example of a honeytoken attack? a) Testing multiple passwords against a username b) Authentication attempts against an alphabetical list of usernames c) login to a fake acct you created d) none

c

Which of the following is not a feature of Azure App Service? a) support for multiple development languages, including java and python b) support for windows and linux c) firewall protection for apps you develop with azure app service d) support for containers

c

Your organization needs to provide a consistent user experience for running Windows apps across your enterprise, including for macOS, iOS, and Android. Which provides that consistent experience? a) Azure client emulator b) windows 10 enterprise c) windows virtual desktop d_ microsoft 365

c

Your company currently installs Microsoft Office on each user's computer using perpetual license you've purchased from a licensing vendor. You propose to the CIO to transition users to Microsoft365 to use Office apps hosted by Microsoft which enables your organization to work wit docs in a web browser and also receive Office app updates automatically. What service category is this? a) IaaS b_ PaaS c) SaaS d) none

c Think Microsoft365

An Azure region ____. a) specifies location of Azure resources b) is always paired with another region c) contains 1 or more data centers d) all of above

d

Does the quoted part need to be changed? "Entering your PIN after you insert a debit card into an ATM" is an example of MFA. a) providing a username and pass to log into Windows b) entering a PIN code on a keypad to enter a building c) providing an email address and pass to log into a website d) no change

d

What's the role you should use to grant users the capability to create & manage resources in Azure while ensuring they have the least permissions needed? a) creator b) reader c) owner d) contributor

d

Which of the following threats can ATP help you detect? a) reconaissance attacks b) pass the hash c) Pass the Token d) all

d

Your organization is planning to deploy a containerized solution in Azure and needs a container orchestration service that enables you to coordinate application upgrades and scale out containers easily. Which solution can do this? a) deploy solution using azure container instances (ACI) b) deploy containers with scale sets c) deploy containers using docker management portal (DMP) d) deploy solution with azure kubernetes service (aks)

d Azure Kubernetes is a container orchestration service used to monitor and manage large #'s of container instances.

You've been asked by CIO to move a lot of data from on premises to Azure. The data needs to be maintained for compliance reasons but won't be accessed unless required by audit or litigation. Which storage is most cost effective? a) cool access storage b) file storage c) disk storage d) archive access storage

d you don't have to access the data often.

Does the quoted part need to be changed? A resource group in Azure "serves as a logical container for Azure resources" a) provides high availability for resources within the resource group b) protects resources in group from being deleted c) contains resources only from the region in which the resource group resides d) no change

d- no change

What is Azure Resource Manager?

enables management of resources- lets you create resource using templates, which it then passes to Azure service provider to create the service.

What is ExpressRoute?

enables you to extend on premises networks into Azure over a private connection managed by a third-party connectivity provider. DOES NOT traverse the internet.

Azure initaitives

group of policies- when you apply an initiative to a scope, the policies in the initiative are applied to all resources in the scope

what data does CosmosDB store?

it's a nosql solution- stores and manages unstructured and semi structured data.

Azure Blueprints

lets you define a repeatable group of Azure resources and associated role assignments and policies to meet your organization's standards and practices, then easily and quickly deploy resources where needed.

Azure Traffic Manager

load balancer for regional or global DNS based load balancing. Does NOT fall over as quickly as front door.

what is azure front door?

load balancer- designed for global/multiregion routing and site acceleration of Internet-facing web traffic. For URL based!!

What is SaaS (Software As A Service)?

organization consumes software hosted by cloud provider, provider manages application while consumer manages access to application. Example: Dropbox, Azure SQL database.

4 types of Blueprint Roles

owner: all permissions contributor: can create and delete blueprint definitions but can't assign blueprints blueprint contibutor: can manage blueprint definitions but not assign them blueprint operator: can assign published blueprints but can't create new blueprints

Azure Content Delivery Network (CDN)

places web content across a distributed network of servers to make content readily available to users based on location. Good for when you need content that users in lots of different areas have to access.

What is Azure Key Vault

provides a secure repository for certificates, keys, and other secrets, along with the capability for applications to call Key Vault to access stored secrets when needed. You can create and manage secrets.

What is IaaS (Infrastructure as a Service)?

software and hardware that powers it all Provider manages hardware and infrastructure, organization manages the system. Example: Virtual Machine. Reduces costs.

what data does sql server store?

tabular data

Azure Application Gateway

used for regional load balancing of web applications

Azure Load Balancer

used when you need to balance traffic based on IP address

Azure Information Protection (AIP)

uses rights management and labels to classify and optionally protect documents and emails w/encryption, identity, and authorization