Platform Engineering Flashcards

(81 cards)

1
Q

What is subscription vending?

A

A process that helps organizations achieve subscription democratization design principles critical for scaling, security, and governance of Azure environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What do subscription vending product lines cater to?

A

The diverse needs of various application teams.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Why is a standardized approach to subscription vending important?

A

It prevents confusion, delay, and inefficiency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the benefits of offering various product lines in subscription vending?

A

They provide flexibility, align with platform engineering principles, and cater to different application team requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is meant by ‘one size fits all’ in subscription vending?

A

An approach that limits internal customers’ flexibility and can compromise application teams’ architecture design choices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are management groups in Azure environments?

A

Organizational units that help manage subscriptions and resources effectively.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What should platform teams consider when designing subscription vending?

A

Questions about resources, subscription deployment, network connectivity, RBAC, and governance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the purpose of having multiple types and styles of subscriptions?

A

To provide application teams with flexibility and meet their unique requirements.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a common product line for subscription vending?

A

Corp connected, Online, Tech platform, Shared application portfolio, Sandbox.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does the corp connected product line provide?

A

Connectivity via traditional Layer-3 IP methods between resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

When should you use the corp connected product line?

A

For Rehost and Refactor migrations, familiar on-premises architecture, ‘lift and shift’ applications, and enhancing security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the online product line used for?

A

It doesn’t use traditional Layer-3 IP methods and provides connectivity via public interfaces.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

When should the online product line be utilized?

A

For refactoring, rebuilding applications, enhancing zero-trust alignment, and when private IP address space is limited.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the tech platform product line designed for?

A

Hosting and managing large, complex workloads for multiple application teams.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What types of products might be included in a tech platform product line?

A
  • App Service Environment
  • AKS
  • Azure Virtual Machines
  • Azure Virtual Desktop
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the shared application portfolio product line?

A

For workloads that don’t require multiple separate application landing zone subscriptions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What considerations should be made for resource group delegation in a single subscription?

A
  • Common ownership of related application portfolio
  • Regulatory compliance
  • Azure Policy management
  • Subscription limits
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

True or False: Subscription vending can follow a ‘one size fits all’ design.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Fill in the blank: The _______ product line is for workloads requiring traditional Layer-3 IP routing connectivity.

A

corp connected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the purpose of the Sandbox product line?

A

To allow application teams to build a proof of concept (PoC) or minimum viable product (MVP) with fewer controls.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is Azure Private Link used for?

A

To enable private connectivity between applications and expose services securely.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the goal of subscription democratization?

A

To provide flexibility and control to internal customers in Azure environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What management overhead increases when adding new resource groups to subscriptions?

A

Increases management overhead to create Azure Policy assignments

When new resource groups are added, it complicates the management of policy assignments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What happens to security and governance gaps when policies are not immediately assigned to resource groups?

A

Increases security and governance gaps

Immediate assignment of policies is crucial for maintaining security and governance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What are the limits that each Azure subscription has?
Soft and hard limits for Azure services ## Footnote These limits help ensure that applications do not hit barriers that prevent growth.
26
Why should separate subscriptions be created for applications anticipating large growth?
To meet subscription limits ## Footnote Large growth can lead to exceeding limits if not managed with separate subscriptions.
27
What is a potential issue when sharing subscriptions with application teams from different business units?
Prevents 'noisy neighbor' problems ## Footnote Sharing subscriptions can lead to performance issues due to competing resource needs.
28
Who can create resource groups when a subscription is shared among various application teams?
Only platform teams ## Footnote This restriction helps limit resource group sprawl and increases management complexity.
29
What is the purpose of the shared application portfolio product line?
To deliver several small resources or components shared between applications ## Footnote This approach is useful when components don't fit into dedicated application landing zones.
30
What is a sandbox product line used for?
To provide safe, lightly governed, and visible testing areas for PoCs or MVPs in Azure ## Footnote Sandboxes help prevent shadow IT by providing a controlled environment for experimentation.
31
What should be avoided when creating sandbox subscriptions?
Don't create a single sandbox subscription and share it among teams ## Footnote Each team should have its own sandbox subscription to maintain governance.
32
What are the initial subscription vending product lines customers typically enable?
* Sandbox * Corp connected * Online ## Footnote These product lines help organizations manage their Azure resources effectively.
33
What is a key principle for platform engineering teams?
Empower developers through self-service with guardrails ## Footnote This principle allows developers to make decisions within defined parameters while maintaining governance.
34
What is the goal of self-service with guardrails?
To reduce developer toil while providing visibility to teams ## Footnote Automation helps ensure governance without sacrificing developer autonomy.
35
What is meant by the 'everything as code' pattern?
Using infrastructure as code (IaC) through continuous delivery (CD) pipelines ## Footnote IaC allows for the management of cloud resources as code, enhancing security and auditability.
36
What tools can be used for Infrastructure as Code (IaC)?
* Bicep * Terraform * Helm charts ## Footnote These tools help in creating and managing cloud infrastructure efficiently.
37
What is the benefit of having an inventory to track assets?
Improves security, promotes reuse, and makes discovery easier ## Footnote An inventory system helps organizations manage their resources effectively.
38
What should be considered when deciding on the visibility of inventories?
The best approach for your organization ## Footnote Different organizations have varying levels of access and visibility depending on their needs.
39
What is the significance of linking inventories with relational graphs?
Enhances discoverability, governance, and reuse ## Footnote This helps teams understand relationships between different assets and promotes better resource management.
40
What are some capabilities that platform engineers should focus on?
* Build and scale internal developer products * Contribute to architecture and design * Work with CI/CD tools * Build templates with IaC * Write code in scripting languages ## Footnote These capabilities enhance the efficiency and reliability of platform engineering efforts.
41
What is the purpose of having developer self-service capabilities?
To reduce developer toil and allow teams to be more autonomous ## Footnote Self-service capabilities help teams operate independently while adhering to governance.
42
What does IaC stand for?
Infrastructure as Code
43
Name three tools used for Infrastructure as Code (IaC).
* Bicep * Terraform * Helm charts
44
What is a key benefit of managing cloud infrastructure like code?
You can apply all the benefits of a git repository like security and auditability.
45
What does the term 'everything as code' (EaC) refer to?
The practice of managing all aspects of development and operations through code.
46
Fill in the blank: A configuration file in IaC is typically in _______.
[YAML or JSON]
47
What is the purpose of start right templates in software development?
To establish secure, governed development practices and enable developers to get started quickly.
48
What role do templates play in developer self-service experiences?
Templates define outputs and available options for developers to choose from.
49
True or False: Templates should only focus on bootstrapping a development effort.
False
50
What is a 'get right campaign'?
An initiative to create a two-way dialog with application teams and help them migrate applications to paved paths.
51
What is the teams as code pattern?
A method to standardize team membership and access across various systems.
52
Fill in the blank: The teams as code pattern eliminates manual _______ processes.
[onboarding and offboarding service desk]
53
What does CI/CD stand for?
Continuous Integration/Continuous Deployment
54
How do CI/CD systems enhance the everything as code pattern?
They automate workflows and provide auditability and visibility.
55
What kind of issues can arise from inconsistencies in developer environments?
Frequent 'it works on my machine' problems.
56
What is the benefit of using containerized or virtualized development environments?
They provide benefits such as consistency and easier setup.
57
What are some areas to consider when creating templates?
* Sample source code * Build and deployment scripts * Configuration for CI/CD * Infrastructure as code assets * Security and policy as code assets
58
What is the purpose of security and policy as code?
To integrate security configurations into the development process.
59
How can developers trigger workflows in CI/CD systems?
Manually through UIs or CLIs, or via an API.
60
What is a potential security risk of manual service desk processes?
Overprovisioning access.
61
What is the role of a central repository in the teams as code pattern?
It acts as the source of truth for team membership and roles.
62
What is an example of a templating engine?
cookiecutter or Yeoman
63
What should templates include to drive app patterns?
Code and configuration for recommended languages, app models, services, APIs, SDKs, and architectural patterns.
64
True or False: Templates should only be created for new applications.
False
65
What is the significance of branch protection rules in templates?
They prevent unauthorized merges into production.
66
What is the function of Azure Developer CLI (azd)?
It provides a convenient set of developer commands and simplifies CI/CD setup.
67
What is the primary focus of the DevSecOps movement?
To move security configuration into code
68
What types of artifacts can be applied at the application level in DevSecOps?
Policy as code artifacts
69
Name two types of files that should be included in security configuration.
* CODEOWNERS * dependabot.yaml
70
What tool can be used for scheduled workflows and pipeline runs for scans?
Defender for Cloud
71
What is important for supply chain security in DevSecOps?
Factoring in container images along with application packages and code
72
What is essential for providing visibility into applications once deployed?
Observability, monitoring, and logging
73
What aspect of setup often involves Infrastructure as Code (IaC)?
Agent deployment and instrumentation
74
Which configuration-as-code artifact is mentioned for Azure Application Insights?
Monitoring dashboards
75
What should be included for distributed tracing and logging?
Sample code using your tools of choice
76
What configuration files should be included for coding environment setup?
* Coding linters * Formatters * Editors * IDEs
77
What types of virtualization files can be included in coding environment setup?
* devcontainer.json * devbox.yaml * Dockerfiles * Docker Compose files * Vagrantfiles
78
What is the purpose of providing configuration files for testing?
To facilitate both unit and more in-depth testing
79
Which service is mentioned for UI testing?
Microsoft Playwright Testing
80
What can be included if the issue management system supports task templates?
Task / issue / PR templates as code
81
How can you set up collaboration tools like Microsoft Teams or Slack?
Provide a workflow/pipeline that updates your systems using an available CLI or API