Tag: Azure AI Fundamentals AI-900 Exam Prep

Currently trying to figure out group-based wcf for our company and defender has several places to manage different url block lists and policies. I've seen a few: Tenant blocking (which is org wide and not group based) Indicators->URLs (but I cant confirm this working) Cloud apps with unsanctioned settings and excluding a group. I'm wondering what the industry best practice is for allowing exception groups for blocked sites for various teams (HR/IT/Legal/Etc). Any help appreciated. submitted by /u/Risin247 [link] [comments]

I would love to hear from you how your hub&spoke architecture looks like: How do you structure/isolate workloads from each other? How did you design your spokes (what responsibilities does a spoke handle in your architecture)? How do you manage services between spokes, which need to be shared? What is contained in your hub (e.g. firewall, dns, etc.) do you use Azure Virtual WAN? how do you manage DNS from on-premises (resolvers, proxies, etc.)? etc. submitted by /u/CerealBit [link] [comments]

Hello, I am not sure if this is the right place to ask but here I go. I would like to know please if there is any way I can get a discount voucher for the Azure Data Engineer Associate DP-203 exam ? It is my first Microsoft exam and it would really help. I tried searching for Azure courses that will give you a discount after you pass them but I didn't have any luck. I would really appreciate any advice. Thank you in advance ! submitted by /u/AnonymouseRedd [link] [comments]

submitted by /u/RunningThroughSC [link] [comments]

Ik this is soo stupid but i had just redeemed student offer and was playing around and somehow i managed to delete the owner and now i can't do literally anything. it won't even allow me to create a ticket and throws this whenever i try to create a ticket The portal is having issues getting an authentication token. The experience rendered may be degraded. Additional information from the call to get a token: Extension: Microsoft_Azure_Support Resource: self Details: The logged in user is not authorized to fetch tokens for extension 'Microsoft_Azure_Support' because the user account is not a member of tenant 'the tenant id'. Error details: invalid_grant: 50020 - [2024-09-09 16:25:57Z]: AADSTS50020: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application 'c44b4083-3bb0-49c1-b47d-974e53cbdf3c'(Azure Portal) in that tenant. The account needs to be added as an external user in the tenant first. Sign out and sign in again with a different Azure Active Directory user account. Trace ID: b86ef239-3164-4e18-bfaf-7a042d505200 Correlation ID: 23af5c1f-eb19-4963-a4f6-f74c8b200215 Timestamp: 2024-09-09 16:25:57Z - Correlation ID: 23af5c1f-eb19-4963-a4f6-f74c8b200215 - Trace ID: b86ef239-3164-4e18-bfaf-7a042d505200 submitted by /u/Decision_Possible [link] [comments]

Hello Azure admins! We're having an issue with a client that is using an AVD hostpool. Almost every day at this point, our hostpool (which is located in East US 2) is failing to deploy a host or two due to the availability of D8as family VMs. I'm looking to ensure successful deployment despite VM availability issues, and I'm not sure if I should be looking at an availability set or an availability zone, or something else entirely. So I ask, is anyone else having issues deploying certain VM sizes to existing hostpools in EastUS2, and for those that have- how do you ensure successful deployment despite these issues? submitted by /u/superslowjp16 [link] [comments]

Hello all! How I can monitor App Registrations activity? How I can tell, that client secret and client id leaked? With user sign-ins in entra portal i have logs, what about non interactive flows with app registrations or service principals? How i can monitor activity for client-id? For instance, how I can tell if token was obtained from ip from China? submitted by /u/SpecialistAd670 [link] [comments]

Okay, back with another noob question. I have a VNG established via IPSEC, modified my DNS, the whole 9 yards. Everything is working great, sync snycs, I can browse file shares etc. I have external connections disabled in my storage account networking and a private endpoint setup in the sync service. I'm not running or planning to run any VM's in Azure since I use Proxmox on prem for that. I'm just using it for Azure file sync. Long story short, I made the mistake of enabling the Azure Firewall on Friday before I left, I didn't configure it. I just created the resource, pinged the IP and then left for the weekend. I was not at all prepared for the cost of having the Azure Firewall. I am being charged $30.00 a day for it. So my question is, do I actually need it if I am connecting via VNG? Am I better off using network security groups? I am just kind of muddling my way through things here, so any advice would be appreciated. submitted by /u/TheThumpsBump [link] [comments]

I’m planning to take the AZ-104 online exam next week and have been reviewing exam questions on YouTube and Google. Are there any specific websites or resources you’d recommend for preparing? submitted by /u/Happy_BKK [link] [comments]

This is my first time taking the AZ-104 exam online. Are there any important things I should know about online exams compared to in-person ones? I’ve heard the online experience can be different. Does anyone have any tips or advice? submitted by /u/Happy_BKK [link] [comments]

hello ,Thinking about using KodeKloud to prep for AZ-305. Has anyone taken it? Is it good for passing the exam? Appreciate any thoughts! submitted by /u/Embarrassed-Net-4851 [link] [comments]

To be very honest, I found using DCRs very very buggy in nature. While I was trying to create DCR, i found no way to export ARM template its gonna spawn resources for. Where Can I report this inconsistency? submitted by /u/GoldenDew9 [link] [comments]

Hi, we removed crowdstrike from our environment and are beginning to setup Defender on our PCs (which was already installed on the PCs and I guess because we uninstalled Crowdstrike Defender became default)....issue is I don't see any clients in the Intune or Defender/Security portals to manage alerts/policies/etc. What can I do? We use local AD and not on Entra yet. submitted by /u/reditguy2020 [link] [comments]

Hi, I have just finished studying for the az900 fundatmentals exam and will be taking the exam at a later date. I have been following John Savils videos on Youtube. However i have a few questions regarding the structure of the exam and course. So previously i was learning front-end development via Code Academy and it offered a structured course outline with a course guide along with practicals in which i could include in my portfolio for when applying for jobs. I am ideally looking to progress through the Azure Cloud courses following John Savils videos and maybe Microsoft Learn. I am aware that when i will be applying for jobs, i will need a portfolio to submit of my work however it doesn't seem that with the Azure exam and the JS videos on youtube, there isn't a case to actually do practical work whilst studying (unlike Code Academy), yet alone anything designed to help one create a portfolio. I was wondering if anyone had any tips on what i could do. submitted by /u/cloud250 [link] [comments]

Hi all, We have a situation which I can't find a simple/workable solution for at present. Whenever we have a new workload, we put it into a new Subscription (Aligning with the CAF model). But this presents a problem when it comes to Defender for Cloud, it is reporting non-compliance on services which we would never use in any of those Subscriptions. There doesn't seem to be a way to globally exclude a recommendation, IE at the Management Group level. Has anyone else come across this and if so, how did you fix/address this? submitted by /u/TheCitrixGuy [link] [comments]

Hi, We have a web api hosted in Azure App Service. Now we need to expose an endpoint to a third party (gov regulatory entity) and they requested for a client id and secret. There’s one app registration for the web api, and it has application permissions exposed. Per my understanding, to provide them the client id and secret, I would need another app registration (let’s call it the client app), with the exposed application permissions from the web api app registration added to the clients app API permissions as described here https://learn.microsoft.com/en-us/entra/identity-platform/howto-add-app-roles-in-apps#assign-app-roles-to-applications In short need to do this (from https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-client-creds-grant-flow#application-permissions) https://preview.redd.it/e5koe48rdsnd1.png?width=1462&format=png&auto=webp&s=af6bf6ee2a07cd2500ee131bb383aef1da554608 On the gov side we don’t know what the application looks like, they need just the client id and secret (there will be no user sign-in happening), just service to service type of authentication. So I assume they would call the token endpoint with the client id and secret, and it would return a token with roles claims for the application role it has been granted permission to. If my understanding is correct, how can I secure it, potentially exposing through Azure API Management ? Thanks ! submitted by /u/Fast-Cardiologist705 [link] [comments]

Hey everyone, I work for a small non-profit with about 50 users. Right now, we have an on-premises server running standard VMs like Active Directory (AD) and a local FileServer. Our VMs are backed up on a NAS that’s right next to the server (I know, this is bad setup). Our server is past its end of life, and our IT Director thinks we don’t need a local server anymore. He wants to move everything to the cloud. Most of our apps are already SaaS solutions. I’m looking for some advice on whether we should migrate our VMs to a cloud infrastructure like Azure or just move away from local VMs altogether and use Microsoft EntraID (joining Microsoft Entra Domain instead of AD). All our users have Business Premium licenses, our computers are joined to Intune, and we use Microsoft Defender for Business. Also, should we migrate to Azure Files or move our FileServer to Azure but keep it as a FileServer VM? Thanks in advance for your insights! submitted by /u/kshot [link] [comments]

I still have free trial credits to use. Any suggestions for interesting AI or ML projects? Or a project(s) that will help me learn more about Azure? Thank you. submitted by /u/Alternative-Text6769 [link] [comments]

Following on from my post Friday, a video version of the top 5 security tips that can be thought of as the starting point every organization must be doing on which to build. https://youtu.be/JYWR5GoF3vM 00:00 - Introduction 00:39 - Resources to help 01:50 - Strong auth 06:49 - Less is more 11:16 - Stay current 13:57 - Isolate backups 18:36 - Stay informed 22:22 - Review 23:34 - Close submitted by /u/JohnSavill [link] [comments]

Hello, I would like to create a Conditional Access policy that excludes all Android and Windows Phone devices from my M365 environment. Here is what I have done so far; does it look correct? https://preview.redd.it/y949c7t50snd1.png?width=1237&format=png&auto=webp&s=ed657ac7078ab4a4e36babc3374f6730e773af09 submitted by /u/MalKieApl [link] [comments]