AZ-900 Notes
AZ-900 Notes
Azure Advisor
- Personalized consultant service
- Designed to provide recommendations and best practices for
- Cost
- Security
- Reliability
- Performance
- Operational excellence
- Actionable recommendations
- Free
Network Security Groups- designed to filter traffic (inbound and outbound) to Azure resources
located in Azure virtual network
- Filtering controlled by rules
Applications Security Groups- Feature that allows grouping of virtual machines located in Azure
virtual network
- Designed to reduce the maintenance effort (Assign ASG instead of explicit IP address)
Role Based Access Control
1. What can be done?
2. Who can do it?
3. Where can it be done?
Role definition- list of permissions like create VM
Security principal- user, group, service principle and managed identity
Scope- resource, resource groups, subscription, management group
- Scopes are hierarchical
- Built-in and custom roles are supported