1.What are Azure Resource Manager (ARM) templates?
ARM templates are JSON files that define Azure resources declaratively, allowing for infrastructure as code (IaC). They enable repeatable, consistent, and automated deployments.
2.What are the differences between Public, Private, and Hybrid Cloud?
| Type | Description | Example |
| Public Cloud | Resources are available over the internet. | Azure, AWS, GCP |
| Private Cloud | Cloud environment is dedicated to one organization. | On-premises Azure Stack |
| Hybrid Cloud | Combination of on-premises and public cloud. | Azure Arc, VPN Gateway |
3.What are Azure Availability Sets?
Availability Sets ensure high availability of VMs by distributing them across fault domains (hardware failure zones) and update domains (maintenance zones).
4.What are the different Virtual Machine (VM) sizes in Azure?
- General-Purpose (B, D, A-Series) – Balanced CPU/memory for web apps.
- Compute-Optimized (F-Series) – High CPU workloads.
- Memory-Optimized (E-Series) – Databases and memory-heavy applications.
- Storage-Optimized (L-Series) – Workloads needing high disk throughput.
5.What is Azure Bastion?
Azure Bastion provides secure remote access to VMs over RDP and SSH without exposing them to the public internet.
6.How does Azure Traffic Manager work?
Azure Traffic Manager is a DNS-based load balancer that routes traffic using:
- Priority Routing – Directs traffic to a primary endpoint.
- Weighted Routing – Distributes traffic based on weight.
- Geographic Routing – Routes based on user location.
7.What is an Azure Application Gateway?
Azure Application Gateway is a Layer 7 load balancer with SSL termination, Web Application Firewall (WAF), and URL-based routing.
8.What are the differences between Azure SQL Database and SQL Managed Instance?
| Feature | Azure SQL Database | SQL Managed Instance |
| Deployment | PaaS (serverless) | Near full SQL Server compatibility |
| Networking | Public endpoint | Private IP support |
| Migration | Minimal changes required | Supports lift-and-shift migration |
9.What is Azure ExpressRoute?
ExpressRoute is a private, high-speed connection between on-premises networks and Azure, bypassing the public internet.
10.What is a Service Principal in Azure?
A Service Principal is an identity used by applications to authenticate to Azure resources securely using RBAC.
11.What is the difference between Azure Security Center and Azure Sentinel?
| Feature | Azure Security Center | Azure Sentinel |
|---|---|---|
| Function | Monitors security posture | SIEM & SOAR for threat detection |
| Focus | Compliance, vulnerability assessment | Security analytics, threat intelligence |
| Use Case | VM security, recommendations | Centralized logging & monitoring |
12.What is Azure Key Vault, and how does it work?
Azure Key Vault is a secure store for managing secrets, encryption keys, and certificates with RBAC-based access control.
13.How do you implement Disaster Recovery in Azure?
- Azure Backup – For VM snapshots and database backups.
- Azure Site Recovery (ASR) – Replicates workloads to another region for failover.
- Geo-Redundant Storage (GRS) – Automatic data replication to a secondary region.
14.What is Azure Lighthouse?
Azure Lighthouse allows multi-tenant management for MSPs (Managed Service Providers) to manage customer subscriptions centrally.
15.How do you troubleshoot Azure Virtual Machine connection issues?
Steps to troubleshoot VM connectivity issues:
- Check VM status (Running/Stopped) in Azure Portal.
- Verify NSG rules for RDP/SSH access.
- Check Azure Bastion or VPN settings.
- Use Serial Console for diagnosing VM boot issues.
- Check Azure Monitor logs for errors.
16.A web application running on Azure VMs experiences slow performance. How do you troubleshoot?
- Use Azure Monitor and Application Insights to check performance.
- Scale VMs using VM Scale Sets.
- Optimize database performance with Azure SQL Indexing.
- Use Azure CDN or Front Door for caching content.
17.How do you secure Azure Storage accounts?
- Enable Azure Defender for Storage.
- Use Private Endpoints to restrict access.
- Implement RBAC and SAS tokens for controlled access.
- Enable storage encryption (AES-256).
18.You need to migrate an on-premises database to Azure. What are the options?
- Use Azure Database Migration Service (DMS) for SQL databases.
- Use BACPAC files for small SQL databases.
- Use Azure Data Factory for large-scale migrations.
19.How do you optimize Azure costs?
- Use Azure Reserved Instances (RI) for cost savings.
- Implement Auto-scaling for VMs and App Services.
- Monitor spending with Azure Cost Management.
- Use Spot VMs for non-critical workloads.
20.How do you configure Multi-Factor Authentication (MFA) in Azure?
- nable MFA in Azure AD.
- Configure MFA policies for users/groups.
- Enforce Conditional Access based on risk levels.
- Use Authenticator apps, SMS, or hardware tokens.
