2 - Core Azure Services Flashcards
1
Q
Availability Zones
A
- Unique physical locations within Azure region
- made of one ormore datacenters
- minimum of three zones in each region
- you can manually place your resources in an availability zone for highest availability
2
Q
Compute Services
A
a category of services in Azure that provides CPU cycles for rent
3
Q
Load Balancer
A
- AKA level-4 load balancer
- allows you to improve performance by splitting work among two or more identical machines
- allows for horizontal scaling of application performance by adding more servers
- IaaS
4
Q
VPN Gateway
A
(Encrypted) (over public network) - type of virtual network gateway that is used to send encrypted traffic between Azure virtual network and on-premises over the public Internet.
5
Q
Application Gateway
A
- Load balancer designed for web applications.
- Uses Azure Load Balancer at the TCP layer and applies URL based routing rules.
- Includes a Web Application Firewall (WAF)
- loadbalancing decisions off of a domain name, or part of a URL path
- IaaS
6
Q
Content Delivery Network
A
- Improves performance by removing the burdenof serving static, unchanging files from the main server to a network of servers around theglobe
- Distributed network of servers that can efficiently deliver web content to users in their local region to reduce latency including caching content on strategically placed servers.
- SaaS
7
Q
Managed Disk
A
- More expensive, but this will allow Azure to provide additional features that reduce the burden of managing your own storage account
- pay per month for a provided GB limit
- IaaS
8
Q
Cosmos DB
A
- Globally distributed DB service for highly responsive, Always On applications, specially serverless apps
- Able to scale rapidly and globally
- extremely low latency (fast) storage designed for smaller pieces of data
- SaaS
9
Q
Azure SQL Data Warehouse
A
-designed for analyzing and reporting on huge data sources
10
Q
Big Data
A
- a set of open source (Apache Hadoop) products that can do analysis on millions and billions of rows of data; current tools like SQL Server are not good for this scale
- Apache Hadoop is a collection of open-source software utilities that facilitate using a network of many computers to solve problems involving massive amounts of data and computation.
11
Q
HDInsight
A
the Azure equivalent of the open source Apache Hadoop tools
12
Q
Azure Databricks
A
A central dashboard for managing big data in Azure, where data analysts, data scientists and data developers can work together to derive business intelligence from data.
13
Q
Artificial Intelligence (AI)
A
- machine learning APIs that analyze voice, text, images, videos,
- natural language processing, and do variousintelligent actions based on that; can do chatbots, real time transcription, translation, etc.
14
Q
Azure DevOps
A
A set of tools to help companies manage development from development to deployment. Includes project management tools such as Boards and deployment tools such as Pipelines.
15
Q
Event Grid
A
– managed event distributor using Publish-Subscribe model
- For serverless computing
- Event Grid supports events coming from Azure services, like storage blobs & resource groups
-You can use filters to route specific events to different endpoints, multicast to multiple endpoints, and make sure your events are reliably delivered.
16
Q
Serverless - Benefits
A
+Only charged when code is executed
+app is elastic
+less management
+works well with microservices
17
Q
Serverless - Negatives
A
- latency due to cold start-time consuming to move to another provider
- lack of resource control
- development is complex apps
18
Q
Load Balancer vs. Traffic Manager
A
- Load Balancer detects an unresponsive VM, it directs traffic to other VMs in the pool.
- Traffic Manager monitors the health of your endpoints. When Traffic Manager finds an unresponsive endpoint, it directs traffic to the next closest endpoint that is responsive.
19
Q
Availability Set
A
- Group with two or more virtual machines in the same Data Center.
- Ensures that at least one of the virtual machines will be available.
- VM’s are separated into Fault Domains with each Fault Domain being in a separate rack. 99.95% SLA.
20
Q
ExpressRoute Gateway
A
(Private) (Not over public network) - private connections between Microsoft datacenters and infrastructure and on-premises or in a colocation facility
21
Q
Storage Redundant Types
A
- Geo-redundant storage (GRS) is designed to provide at least durability by replicating your data to a secondary region that is hundreds of miles away from the primary region. (99.99999999999999% (16 9’s)
- Locally redundant storage (LRS) replicates your data three times within a single data center.
22
Q
Azure Machine Learning Studio
A
Azure Machine Learning-
- Microsoft Azure Machine Learning Studio is a collaborative tool to build, test, and deploy predictive analytics solutions on your data. Publishes models that can be consumed bu BI or Excel
- data science, predictive analytics, cloud resources, and your data meet.
23
Q
Virtual Network Peering
A
- low latency on MS backbone
- private
- allow data transfer between subscriptions, AD tenants, regions, deployment models
24
Q
Storage - Blob
A
Unstructured data
- Can be accessed via http\https
- Serving images or documents directly to a browser.
- Streaming video and audio.
- Writing to log files.
25
Storage - Managed Disk
- Persistent disk for VM’s
- 99.999% availability
- Integration with Availability Zones
26
Storage - File
- Fully Managed file shares accessible via SMB.
| - Encrypted in transit and at rest
27
Storage - Table
- NoSQL storage
| - tables can be stored without a database management system.
28
IoT - Overview
IOT CENTRAL - SaaS
-Managed global IoT solution to connect, monitor, and manage your IoT assets.
IOT HUB - PaaS
-Enable secure and reliable communication between your IoT application and the devices it manages.
examples
- A pressure sensor on a remote oil pump.
- Temperature and humidity sensors in an air-conditioning unit.
- An accelerometer in an elevator.
- Presence sensors in a room.
29
IoT - Quickview
- IoT Central is SaaS - Ready built solution
| - IoT Hub is PaaS - Used for development
30
IOT Hub
-Managed service (PaaS) to enable bi-directional communication between IoT devices and Azure
31
Storage - Queing
Storage for messaging
32
Storage Limits
- 250 Storage accounts per subscription
- 2PB for US\Europe and 500TB for all other including UK
- No Limit blob containers, file shares, tables, queues, entities or messages per storage account
33
Azure Synapse Analytics
Azure Synapse is a limitless analytics service that brings together enterprise data warehousing and Big Data analytics
34
Internet of Things (IoT)
IoT Hub
Messaging hub that provides secure communications and monitoring between millions of IoT devices
IoT Central
Fully-managed global IoT software as a service (SaaS) solution that makes it easy to connect, monitor, and manage your IoT assets at scale
IoT Edge
Push your data analysis onto your IoT devices instead of in the cloud allowing them to react more quickly to state changes.
35
Big Data and Analytics
SQL Data Warehouse
Run analytics at a massive scale using a cloud-based Enterprise Data Warehouse (EDW) that leverages massive parallel processing (MPP) to run complex queries quickly across petabytes of data
HDInsight
Process massive amounts of data with managed clusters of Hadoop clusters in the cloud
Data Lake Analytics
On-demand ("pay as you go") scalable analytics service that allows you to write queries to transform your data and extract valuable insights.
36
Firewall
Azure Firewall is a managed, cloud-based, network security service.
- Stateful firewall as a service with built-in high availability and scalability.
- Azure Firewall provides inbound protection for non-HTTP/S protocols. Examples of non-HTTP/S protocols include: Remote Desktop Protocol (RDP), Secure Shell (SSH), and File Transfer Protocol (FTP). It also.provides outbound, network-level protection for all ports and protocols, and application-level protection for outbound HTTP/S.
37
Initiatives
A group of Policies that makes managing similar Policies easier.
38
Blueprint vs. Policy
A blueprint is a package or container for composing focus-specific sets of standards, patterns, and requirements related to the implementation of Azure cloud services, security, and design that can be reused to maintain consistency and compliance.
A policy is a default allow and explicit deny system focused on resource properties during deployment and for already existing resources. It supports cloud governance by validating that resources within a subscription adhere to requirements and standards.
Including a policy in a blueprint enables the creation of the right pattern or design during assignment of the blueprint. The policy inclusion makes sure that only approved or expected changes can be made to the environment to protect ongoing compliance to the intent of the blueprint.
A policy can be included as one of many artifacts in a blueprint definition. Blueprints also support using parameters with policies and initiatives.
