Tag: Azure AI Fundamentals AI-900 Exam Prep

Hi all, We have several systems hosted on Azure that store Personally Identifiable Information (PII), including HR and customer data. I understand that PII needs to be specially handled, but I’m looking for practical guidance on how to implement this securely in Azure. 1. How do you protect PII at both the database and UI level in Azure?At the DB level, we’re using Azure SQL and some MySQL on Azure VMs. At the UI level, we have web apps and mobile frontends. What automated data retention and disposal features do you use? Are there Azure-native tools that help handle automated deletion or archiving of PII after its retention period? Thanks in advance! submitted by /u/Big-Razzmatazz3034 [link] [comments]

I'm new to azure and need to use sqlcmd command, it's for college. I'm using bash and created a SQL db and a Ubuntu VM. The azure CLI is giving me: sqlcmd command not found I did some research, most places says that i have to install and on azure i have to kinda activate and IDK where. submitted by /u/nightmaresnw [link] [comments]

As per title. Is there any way to alert ( send an email ) if machine was rebooted because of the Azure failure/platform issue? If so, what logic should I apply and what event? https://preview.redd.it/9j74h2h08m0f1.png?width=1053&format=png&auto=webp&s=c3a090bdee80a2d878cab1805819bc9393eab68c submitted by /u/maziarczykk [link] [comments]

Is there a way grant someone Read Only to App Registration: https://portal.azure.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade I gave the user Directory Reader Role but they are still getting access denied. submitted by /u/andyboy16 [link] [comments]

Passed SC-200 today with a score of 800. It was a very challenging exam, to be quite honest. I don't necessarily recommend this approach, but I only studied for a little over a week. However, I did complete the entire Microsoft Learn course, which meant roughly 6 hours of studying per day. A few important notes for those preparing for this exam: Time Estimates: Don't rely too heavily on the time estimates provided in the Learn courses. In my experience, they tend to be on the lower end of what you'll actually need. Study Approach: I read through the entire Learn course, took multiple practice exams, and watched YouTube videos specifically focused on Sentinel and Copilot(due to inexperience). On the final day and morning before the test, I focused entirely on practice exams and reviewing my mistakes, without diving too deeply into material. KQL Tips: If you're unsure about a question involving KQL, make sure to check the table summary in Learn. There is usually some helpful context provided at the top of the page. Also, pay close attention to different tabs within the Learn pages during the exam, as some critical information can be hidden behind less obvious sections. Experience Level: I have zero hands-on experience with Sentinel and Copilot outside of this study period, a small amount of Defender for Cloud experience, and a lot of experience with Splunk, MDE, MDI, MDO, MDCA, and Advanced Hunting. This helped to some extent, but more exposure to the first three would have been a significant advantage. Testing Platform Issue: I took the test through Pearson VUE remotely, and when I started, I only had 1 hour and 20 minutes on the clock, even though I started 10 minutes before my scheduled time. I'm not sure if this was an error or a quirk of the system, but it left me scrambling at the end. I managed to answer all the questions but left 4 or 5 flagged items unreviewed due to time constraints. Next, I plan to take AZ-500 in about 3 months, followed by SC-100. If anyone has experience taking this particular path, I'd appreciate any advice. I get these exams and courses for free, so I'm sticking to the Microsoft ecosystem for now. submitted by /u/Harooo [link] [comments]

I manage IT for a nonprofit, today, they put a charge of almost a thousand dollars, it was using credits before, all I have is one Ubuntu server and a few restore points+storage, why did this happen? And how do I fix it? submitted by /u/glassa1 [link] [comments]

We’re setting up a process for scanning 3rd party data files inbound to our hub lakehouse storage account in our core Azure network We want to be able to scan these files on landing in a storage account (possibly within a separate VNET acting as a DMZ) and if successful trigger copy pipelines (ADF or Databricks) to do the copy into the lakehouse via a firewall. From doing some basic research, we can do this using defender scan status events via event hub. Is there any recommended way to do this, and is it even necessary? submitted by /u/Western-Platform9384 [link] [comments]

Hi, I have been trying to set up my CI/CD workflow.. and so far I have found no documentation on how to do the deployment of APIM Synthetic graphql field resolvers.. we used to have this set-graphql-resolver` which would conveniently let us associate a resolver policy to a specific field of the graphql schema but M$ conveniently "deprecated" that capability (thank you very much). So far the only way I have seen in the wild of deploying this automatically is via bicep templates as shown here: https://github.com/Azure-Samples/api-management-sample-apis/blob/main/infra/core/gateway/synthetic-graphql-resolver.bicep but i'm honestly unsure if that is still working since it's been 2 years since the last update of that repo. Has anybody done this already and can provide me a small example or just confirm me that the approach on the Azure Samples is still working so I don't spend days moving from ApiOps to bicep templates ? I see there's an open feature request and bug on the ApiOps repository but giving the state of the backlog I really don't think they will implement it anytime soon. Any help or hint would be greatly appreciated, thanks! submitted by /u/twitchineye [link] [comments]

Per the title, does having a function app run on a Premium App Service Plan take away the cold start issue with function apps? I'm trying to figure out how best to manage this, and short of going the cron job route, having an appropriate plan seems to make the most sense. submitted by /u/Technical-Praline-79 [link] [comments]

Hi, I've got a bit of an annoying situation. Doing some work for a company who created a 365 account via godaddy, and now want to move away from it to a new clean 365 tenant (so they can have full control over it and aren't stuck with an awful sharepoint name). They have a few VMs and a couple of azureql databases in a subscription, I've used the "change directory" option on the subscription to move it across to the new tenant, for whatever reason the "transfer billing" part isn't an option (I assume it's godaddy issue), so now I wonder what happens when this old godaddy+365 tenant is deleted, does that delete the subscription or will the billing transfer over to the new tenant? Given it's a live server I really don't want to just delete it when I remove the old account. submitted by /u/Kiytan [link] [comments]

This is as best as I can describe what I am trying to do: Entra ID > Monitoring and Health > Sign in logs. Here i can see the successful/failed attempts and other info based on authentication. I want to be able to summarize the data (probably show the amount of failed sign ins, where most failed attempts are coming from (IP address), and what applications are trying to be accessed). It'd be nice to have this all summarized for each 30 day period and be sent automatically to certain admins via email. Example: "log into outlook and see a new email every first of the month. Inside the email, I see a summary of last month's (30 days) sign in logs" I've been told that I should connect Power Bi and MS Graph since i have an Office E5 license so I'm currently there unless I am far off. If anyone understands what I am trying to do, please send help. Thank you! submitted by /u/Kindly-Wedding6417 [link] [comments]

Hi Everyone, I'm facing an issue while trying to connect to Azure AI Search with my python app after disabling public network access. I have a simple RAG application with a chat UI running on App Service which is using Blob storage, Cosmos DB, and AI Search. I have kept all these services private, i.e., created a private endpoint for each of them as I want them to communicate only in the private network. However, when I disable public network access for AI Search, it throws an error stating that the request is being blocked by Network Security Perimeter. But I checked my entire subscription but there is no such resource created. Here is the entire error: There was an error generating a response. Chat history can't be saved at this time. Error code: 400 - {'error': {'requestid': '08a72d94-614a-4108-80be-56edf5a93f7e', 'code': 400, 'message': 'Invalid AzureCognitiveSearch configuration detected: Call to get Azure Search index failed. Check if you are using the correct Azure Search endpoint and index name. If you are using key based authentication, check if the admin key is correct. If you are using access token authentication or managed identity of Azure OpenAI, check if the Azure Search has enabled RBAC based authentication and if the user identity or Azure OpenAI managed identity has required role assignments to access Azure Search resource [https://aka.ms/aoaioydauthentication]. If the Azure Search resource has no public network access, make sure enable trusted service of Azure Search.\nAzure Search Error: 403, message=\'Server responded with status 403. Error message: {"error":{"code":"","message":"Request denied from Network Security Perimeter"}}\', url=\'https://azure-final-azure-ai-search.search.windows.net/indexes/company-final-azure-search-index?api-version=2024-03-01-preview\'\nServer responded with status 403. Error message: {"error":{"code":"","message":"Request denied from Network Security Perimeter"}}'}} I have also tried creating the NSP manually and attaching it to the AI Search resource, but it still throws the same error. Is there any solution by which I can keep the public network access disabled and accessible only for my App Service? submitted by /u/MrNetNerd [link] [comments]

Hi guys, keeping it short I was looking to get into IT specifically in security when I came across this cert called SC-900. Do you recommend this cert for a newbie or should I look for something which is vendor neutral to start with? Thanks submitted by /u/KyIianMbappe7 [link] [comments]

Anyone know of an easy way to import an ASP.Net Web API into APIM? The developer told me they can't enable swagger or help me. submitted by /u/Remote_Depth6536 [link] [comments]

i recently received a free azure certification voucher from the ai skill fest about a month ago, and i’m finally planning to use it by the end of june. after doing a bit of research online, i’ve decided to go for az-900 (microsoft azure fundamentals) and az-204 (azure developer associate). a bit about me: i'm a self-taught full stack developer, learned mern stack, and currently working on pesonal projects while trying to land my first job in tech. while i’ve learned a bit from various sources, i still have a few questions before start... do i need an active azure subscription to start learning and practicing for these certs? what are the best resources or platforms you'd recommend for preparing for az-900 and az-204? any tips for balancing theory vs. hands-on practice? 4.given my profile (mern stack dev aiming for my first role), are az-900 and az-204 the right picks? or would you suggest a different learning path or certification? submitted by /u/Oddie-hoodie369 [link] [comments]

we have recently spun up a serverless sql database as a POC before migrating fully over. it is set up with the default 1 hour auto-pause. for the most part, it is pausing as expected, so we know there are no ghost settings preventing auto-pause. however, over the weekend, the daily bill for our db was double what we're normally seeing. digging into the metrics, we had a pretty constant App CPU Billed of 1,200 VCore seconds. there was no computer usage and no sessions recorded for the entire weekend. what could have prevented this from auto-pausing? in the query performance insight, i did not see any queries being executed over those 2 days. submitted by /u/busty-ruckets [link] [comments]

I can't access the portal, the App Services, or anything. submitted by /u/naufrago11 [link] [comments]

Hey all. I've been working as a contracted Microsoft employee for about 5.5 years now as an Azure CSM and an AI Advisor. I have the AI 900, AZ 900, AZ 104, AZ 305, and have been studying for AI 102 certifications and self taught the basics of C#. I am wanting to get into the field proper but don't know where to start or what sort of positions I should look for. What recommendations do you guys have that could help me get a position working more hands on? My role is technically sales but im tired of sales and I don't want my hard earned certifications to go to waste. submitted by /u/Haunted-Siren [link] [comments]

I've been scripting in PowerShell for 10+ years, but never anything super advanced. Lately I've moved from ISE to VS Code. I'm using the PowerShell extension, and have also migrated all my scripts over to a private GitHub repository I've created for our company. The last few months I got heavy into Zapier but have recently begun to encounter limitations with it that I think would be easier to overcome if I just did things in PowerShell. What I don't want is to have scheduled tasks running all over the place, or even centrally on a server that runs all kinds of scripts. So I was doing some research and came across Azure Automation. I have a few questions about AA that I can't find specific definitive answers on, so hopefully some experts here can provide clarity. 1) AA gives you 500 "free" execution minutes per month. Are these rounded up? If I have a script that takes 10 seconds to run is that only 10 seconds of execution time? Or do they round up to a full minute? Or round up to 30 seconds? Or any rounding at all? 1a) If I have a script that takes 10 seconds to run on my computer locally via VS Code, should I reasonable expect it to also take about 10 seconds when run in Azure Automation? Or is there additional overhead I'm not aware of? 2) Am I able to continue with my current workflow where I edit all my scripts in VS Code, and then commit them to our private GitHub repository? I'd like to set up Azure Automations to run certain scripts and use our GitHub repository as the source of the script. That way, if I update the script, AA is using the most recent version every time. 3) If a script is in AA, can I generate webhooks for those scripts so I can launch them from other platforms via HTTP POST ? 4) Does AA support running scripts on schedules? Run X script every 30 minutes? Run Y script every Monday at 8am? At the end of the day I'm really just looking for an easy place where I can "run" my scripts that are stored in GitHub rather than trying to set up scheduled tasks on a local server. And since its in the cloud now, being able to support running the scripts via webhook would be a huge win. I've also looked into GitHub actions which seems kind of similar to Azure Automation. submitted by /u/cyr0nk0r [link] [comments]

Our organization is looking to setup alerting strategy for our app services. What are the metrics or logs on which alerts have to be set up as priority? submitted by /u/MysteriousDog1152 [link] [comments]