Table of Contents
Deploying resources in Azure is a critical task for administrators, who must configure deployment settings to ensure consistency, security, and compliance with organizational standards. The AZ-104 Microsoft Azure Administrator exam tests a wide range of skills, including deployment and infrastructure management in Azure.
When configuring deployment settings, Azure Resource Manager (ARM) templates are commonly used. ARM templates are JSON files that define the resources you need to deploy for your solution. You can parameterize the templates so they can be used in different environments, like development, testing, and production. ARM templates allow for declarative configuration of resources.
Organize your resources into resource groups. A resource group is a container that holds related resources for an Azure solution. The resource group can include all the resources for the solution, or only those resources that you want to manage as a group.
Use resource locks to protect critical Azure resources from accidental deletion or modification. There are two levels of locks:
Deploy resources using ARM templates. Here is a common workflow when deploying an ARM template:
{
“$schema”: “https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#”,
“contentVersion”: “1.0.0.0”,
“parameters”: {
“virtualNetworkName”: {
“type”: “string”,
“defaultValue”: “VNet1”
},
“addressPrefix”: {
“type”: “string”,
“defaultValue”: “10.0.0.0/16”
}
},
“resources”: [
{
“type”: “Microsoft.Network/virtualNetworks”,
“apiVersion”: “2020-06-01”,
“name”: “[parameters(‘virtualNetworkName’)]”,
“location”: “[resourceGroup().location]”,
“properties”: {
“addressSpace”: {
“addressPrefixes”: [
“[parameters(‘addressPrefix’)]”
]
}
}
}
]
}
Understand the two deployment modes:
Implement Azure Policy to enforce organizational standards and to assess compliance at-scale. Policies are rules that are enforced at deployment. Create and assign policies to control properties such as the types of resources that can be deployed or the locations in which resources can be deployed.
For more complex environments, use Azure Blueprints to orchestrate the deployment of various resource templates and other artifacts, such as role assignments and policy assignments.
Feature | ARM Templates | Azure Blueprints |
---|---|---|
Scope of Action | Can deploy resources | Can deploy resources, apply policies, and set up RBAC |
Reusability | Highly reusable with parameters | Centralized management for templates, policies, and RBAC |
Environment Setup | Suitable for single deployments | Designed for setting up consistent environments |
Policy & Role Assignments | Not included | Includes policy and role assignments |
Sequence of Deployment | Single-step deployment | Step-by-step deployment with dependency handling |
By carefully configuring deployment settings, Azure Administrators can ensure that they effectively manage their Azure environments, which can be dynamic and complex. Using the right mix of Azure resource management tools and techniques is critical to achieving this goal.
Correct Answer: True
Explanation: Azure Resource Manager templates are indeed JSON files that define the deployment and configuration of resources in Azure, allowing for declarative setup of your cloud environment.
Correct Answer: A) New-AzResourceGroupDeployment
Explanation: The New-AzResourceGroupDeployment cmdlet is used to deploy an Azure Resource Manager template to a resource group in Azure.
Correct Answer: False
Explanation: It is not necessary to create a storage account to hold the deployment templates. They can be deployed directly from your local machine, GitHub, or Azure DevOps, among others.
Correct Answer: D) All of the above
Explanation: Azure Portal, Azure CLI, and Azure PowerShell are all tools that can be used to automate the deployment of Azure resources.
Correct Answer: True
Explanation: Azure Policy is a service in Azure that can be used to create, assign, and manage policies to enforce organizational standards and to assess compliance across all Azure resources.
Correct Answer: A) Azure Template Spec
Explanation: Azure Template Spec is a feature that allows you to manage and track multiple versions of ARM templates and their parameters.
Correct Answer: True
Explanation: Azure DevOps provides services for continuous integration and continuous deployment (CI/CD) that can automate the process of deploying resources to Azure.
Correct Answer: A) az deployment group cancel
Explanation: The `az deployment group cancel` command is used to cancel a currently running deployment, which is effectively rolling back the in-progress changes.
Correct Answer: False
Explanation: Azure Resource Manager does not support automatic redeployment of successful deployments when a deployment fails. Redeployment has to be explicitly initiated by the user.
Correct Answer: A) Azure Blueprint
Explanation: Azure Blueprint enables the creation of a repeatable set of Azure resources that implements and adheres to an organization’s standards, patterns, and requirements.
Correct Answer: True
Explanation: Azure Tags allow you to annotate resources with name/value pairs for organizational purposes across different resource groups and subscriptions.
Correct Answer: D) All of the above
Explanation: Azure Resource Manager templates can be deployed at the resource group, subscription, and management group scope, allowing for flexible deployment strategies across your Azure environment.
Configuring deployment settings in Azure App Service is important to ensure that your application is deployed smoothly and with minimal downtime.
The two main deployment methods for Azure App Service are Code-based and Container-based.
Continuous deployment enables you to automatically deploy updates to your application, ensuring that your application is always up-to-date.
Deployment slots are a best practice that enables you to deploy updates to a staging environment before deploying to the production environment.
Source control enables you to track changes to your application’s code and collaborate with other developers.
The benefits of using deployment slots in Azure App Service include the ability to test updates before deploying to the production environment, minimizing the risk of errors and downtime.
Yes, you can have multiple deployment slots in Azure App Service.
Production deployment slots are used for the live production environment, while non-production deployment slots are used for testing and development.
You can monitor your deployment by reviewing the App Service logs and performance metrics in the Azure portal.
You can automate your deployment in Azure App Service by using continuous deployment, source control, and deployment slots.
The purpose of a deployment center in Azure App Service is to provide a centralized location for managing deployments.
Yes, you can customize the deployment settings in Azure App Service to meet the specific needs of your application.
A deployment script is a script that enables you to automate the deployment process in Azure App Service.
You can rollback a deployment in Azure App Service by using the deployment slots and rolling back to a previous version.
The benefit of using a rolling deployment strategy in Azure App Service is that it allows you to deploy updates without downtime or impact on users.
If this material is helpful, please leave a comment and support us to continue.