AZ-104 Pre reqs for Azure administrators Rated A+

AZ-104 Pre reqs for Azure administrators Rated A+ Azure Policy is an Azure service you use to create, assign, and manage policies. Creating a policy 1. Create a policy definition 2. Assign a definition to a scope of resources 3. View policy evaluation results Policy definition expresses what to evaluate and what action to take. represented as a JSON file Ex. Allowed Storage Account SKUs This policy definition has a set of conditions/rules that determine whether a storage account that is being deployed is within a set of SKU sizes. Its effect is to deny all storage accounts that do not adhere to the set of defined SKU sizes. Ex. Allowed Resource Type This policy definition has a set of conditions/rules to specify the resource types that your organization can deploy. Its effect is to deny all resources that are not part of this defined list. Ex. Allowed Locations This policy enables you to restrict the locations that your organization can specify when deploying resources. Its effect is used to enforce your geographic compliance requirements. Ex. Allowed Virtual Machine SKUs This policy enables you to specify a set of VM SKUs that your organization can deploy. Ex. Not allowed resources types Prevents a list of resource types from being deployed. Policy assignment a policy definition that has been assigned to take place within a specific scope. Policy Effect: Deny The resource creation/update fails due to policy. Policy Effect: Disabled The policy rule is ignored (disabled). Often used for testing. Policy Effect: Append Adds additional parameters/fields to the requested resource during creation or update. A common example is adding tags on resources such as Cost Center or specifying allowed IPs for a storage resource. Policy Effect: Audit, AuditIfNotExists Creates a warning event in the activity log when evaluating a non-compliant resource, but it doesn't stop the request. Policy Effect: DeployIfNotExists Executes a template deployment when a specific condition is met. For example, if SQL encryption is enabled on a database, then it can run a template after the DB is created to set it up a specific way. True or false: You can download published audit reports and other compliance-related information related to Microsoft's cloud service from the Service Trust Portal True Which Azure service allows you to configure fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs? Role-based Access Control Which Azure service allows you to create, assign, and, manage policies to enforce different rules and effects over your resources and stay compliant with your corporate standards and service- level agreements (SLAs)? Azure Policy Which of the following services provides up-to-date status information about the health of Azure services? Azure Service Health Where can you obtain details about the personal data Microsoft processes, how Microsoft processes it, and for what purposes? Microsoft Privacy Statement Suppose you want to run a network appliance on a virtual machine. Which workload option should you choose? Compute optimized True or false: Resource Manager templates are JSON files?