AZ 900 Flashcards

1
Q

Azure DevOps Services

A

Azure DevOps Services is a suite of services that address every stage of the software development lifecycle. Azure Repos, Azure Boards, Azure Pipelines, Azure Artifacts, Azure Test Plans.

GitHub works on a simple model of read/write permissions to every feature. Meanwhile, Azure DevOps has a much more granular set of permissions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

GitHub vs DevOps vs GitHub Actions

A

GitHub is a lighter-weight tool than Azure DevOps, with a focus on individual developers contributing to the open-source code.

Azure DevOps, is more focused on enterprise development, with heavier project-management and planning tools, and finer-grained access control.

GitHub Actions enables workflow automation with triggers for many lifecycle events. One such example would be automating a CI/CD toolchain.

Although both Azure DevOps and GitHub allow public and private code repositories, GitHub has a long history with public repositories and is trusted by tens of thousands of open-source project owners.

Are you building open-source software?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Azure DevTest Labs

A

Azure DevTest Labs provides an automated means of managing the process of building, setting up, and tearing down virtual machines (VMs) that contain builds of your software projects.

This way, developers and testers can perform tests across a variety of environments and builds. And this capability isn’t limited to VMs. Anything you can deploy in Azure via an ARM template can be provisioned through DevTest Labs.

Provisioning pre-created lab environments with their required configurations and tools already installed is a huge time saver for quality assurance professionals and developers.

Do you need to automate and manage test-lab creation?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Azure Advisor

A

Azure Advisor evaluates your Azure resources and makes recommendations to help improve reliability, security, and performance, achieve operational excellence, and reduce costs. Advisor is designed to help you save time on cloud optimization. The recommendation service includes suggested actions you can take right away, postpone, or dismiss.

The recommendations are available via the Azure portal and the API, and you can set up notifications to alert you to new recommendations.

Reliability: Used to ensure and improve the continuity of your business-critical applications.
Security: Used to detect threats and vulnerabilities that might lead to security breaches.
Performance: Used to improve the speed of your applications.
Cost: Used to optimize and reduce your overall Azure spending.
Operational Excellence: Used to help you achieve process and workflow efficiency, resource manageability, and deployment best practices.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Azure Monitor

A

if you want to keep track of the performance or issues related to your specific VM or container instances, databases, your applications, and so on, you want to visit Azure Monitor and create reports and notifications to help you understand how your services are performing or diagnose issues related to your Azure usage.

is a platform for collecting, analyzing, visualizing, and potentially taking action based on the metric and logging data from your entire Azure and on-premises environment.

Choose Azure Monitor when you want to measure custom events alongside other collected telemetry data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Azure Service Health

A

provides a personalized view of the health of the Azure services, regions, and resources you rely on.

Service issues are problems in Azure, such as outages, that affect you right now. You can drill down to the affected services, regions, updates from your engineering teams, and find ways to share and track the latest information.

Planned maintenance events can affect your availability. You can drill down to the affected services, regions, and details to show how an event will affect you and what you need to do. Most of these events occur without any impact to you and aren't shown here. In the rare case that a reboot is required, Service Health allows you to choose when to perform the maintenance to minimize the downtime.

Health advisories are issues that require you to act to avoid service interruption, including service retirements and breaking changes. Health advisories are announced far in advance to allow you to plan.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Azure PowerShell

A

The routine setup, teardown, and maintenance of a single resource or multiple connected resources.
The deployment of an entire infrastructure, which might contain dozens or hundreds of resources, from imperative code.

Azure PowerShell is available for Windows, Linux, and Mac, and you can access it in a web browser via Azure Cloud Shell.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Azure CLI

A

The Azure CLI command-line interface is an executable program with which a developer, DevOps professional, or IT professional can execute commands in Bash.

In many respects, the Azure CLI is almost identical to Azure PowerShell in what you can do with it. Both run on Windows, Linux, and Mac, and can be accessed in a web browser via Cloud Shell. The primary difference is the syntax you use. If you’re already proficient in PowerShell or Bash, you can use the tool you prefer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

ARM templates

A

Azure Resource Manager templates (ARM templates) define the infrastructure requirements in your application for repeatable deployments by contrast to the Azure CLI and PowerShell,

The benefit is that the entire ARM template is verified before any code is executed to ensure that the resources will be created and connected correctly.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Azure Container Instances

A

Fastest and simplest way to run a container in Azure without having to manage any virtual machines or adopt any additional services.

It’s a platform as a service (PaaS) offering that allows you to upload your containers, which it runs for you.

Unlike vms you can spin up containers quickly, because you’re just waiting for the app to run, rather than the OS and app.

VMs= Virtualize Hardware
Containers= Virutalize Software
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Azure Kubernetes

A

A complete orchestration service for containers with distributed architectures and large volumes of containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what is the consumption-based model of cloud computing?

A

End users only pay for the resources that they use. Whatever they use is what they pay for.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Scalability?

A

Apps in the cloud can scale vertically and horizontally:

- Scale vertically to increase compute capacity by adding RAM or CPUs to a virtual machine.
- Scaling horizontally increases compute capacity by adding instances of resources, such as adding VMs to the configuration.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Elasticity

A

The ability to automatically and quickly scale up, and then back down. Autoscaling in Azure. Setting a min num of vms, rules to add resources as load comes in, rules to remove resources that are sitting idle. All the instances don’t keep running after a scale up. Tech that strikes the balance between not enough resources and too much resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Moves costs from CapEx to OpEx

A

Allowing costs to be accounted for under OpEx which may have a direct impact on net profit, taxable income, and the amount of expenses on the organization’s balance sheet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

IaaS

A

a cloud provider will keep the hardware up-to-date, but operating system maintenance and network configuration is up to you as the cloud tenan

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

PaaS

A

cloud provider manages the virtual machines and networking resources, and the cloud tenant deploys their applications into the managed hosting environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Serverless computing?

A

cloud service provider automatically provisions, scales, and manages the infrastructure required to run the code. Serverless architectures are highly scalable and event-driven, only using resources when a specific function or trigger occurs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Public, Private, Hybrid Cloud

A

public cloud
Services are offered over the public internet and available to anyone who wants to purchase them. Cloud resources, such as servers and storage, are owned and operated by a third-party cloud service provider, and delivered over the internet.

private cloud
A private cloud consists of computing resources used exclusively by users from one business or organization. A private cloud can be physically located at your organization’s on-site (on-premises) datacenter, or it can be hosted by a third-party service provider.

hybrid cloud
A hybrid cloud is a computing environment that combines a public cloud and a private cloud by allowing data and applications to be shared between them.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Azure region

A

a geographical area on the planet that contains at least one but potentially multiple datacenters that are nearby and networked together with a low-latency network.
Azure has more global regions than any other cloud provider. These regions give you the flexibility to bring applications closer to your users no matter where they are.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Azure availability zones

A

Availability zones are physically separate datacenters within an Azure region.

  • Each availability zone is made up of one or more datacenters equipped with independent power, cooling, and networking.
  • An availability zone is set up to be an isolation boundary. If one zone goes down, the other continues working.
  • Availability zones are connected through high-speed, private fiber-optic networks.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Resource group

A

A container that holds related resources for an Azure solution. The resource group includes resources that you want to manage as a group. You decide which resources belong in a resource group based on what makes the most sense for your organization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Subscriptions

A

Using Azure requires an Azure subscription. A subscription provides you with authenticated and authorized access to Azure products and services. It also allows you to provision resources.

An Azure subscription is a logical unit of Azure services that links to an Azure account, which is an identity in Azure Active Directory (Azure AD) or in a directory that Azure AD trusts.

An account can have one subscription or multiple subscriptions that have different billing models and to which you apply different access-management policies. You can use Azure subscriptions to define boundaries around Azure products, services, and resources.

Groups together user accounts and the resources that have been created by those user accounts. For each subscription, there are limits or quotas on the amount of resources that you can create and use. Organizations can use subscriptions to manage costs and the resources that are created by users, teams, or projects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Management groups

A

groups help you manage access, policy, and compliance for multiple subscriptions. All subscriptions in a management group automatically inherit the conditions applied to the management group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Resource group

A

Act as a logical container into which Azure resources like web apps, databases, and storage accounts are deployed and managed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Azure App Service

A

HTTP-based service that enables you to build and host many types of web-based solutions without managing infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is Orchestration.

A

The task of automating, managing, and interacting with a large number of containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Azure Kubernetes Service

A

Complete orchestration service for containers with distributed architectures and large volumes of containers.

Kubernets is smart. It can manage groups of containers (pods) handling fail over, redunedancy, and provides admins with tools to manage alll the diff container activities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Windows Virtual Desktop

A

Windows Virtual Desktop on Azure is a desktop and application virtualization service that runs on the cloud. It enables your users to use a cloud-hosted version of Windows from any location. Windows Virtual Desktop works across devices like Windows, Mac, iOS, Android, and Linux. It works with apps that you can use to access remote desktops and apps

30
Q

IoT hub

A

Collects datas from sensors and devices and processes it. May also communicate back to the devices.

31
Q

Azure IoT Hub

A

Azure IoT Hub acts as a central message hub for bi-directional communication between your IoT application and the devices it manages. It provides reliable and secure communications between millions of IoT devices and a cloud-hosted backend solution.

32
Q

Azure IoT Central

A

A hosted IoT app platform that’s secure, scales with you as your business grows, and integrates with your existing business apps.

An easier entry point for IoT app building.

33
Q

Azure Sphere

A

End-to-end security in IoT devices. Azure Sphere certified microcontrollers, from silicon partners, with built-in Microsoft security technology, provide connectivity and a dependable hardware root of trust.

34
Q

Azure virtual network

A

nable Azure resources, such as VMs, web apps, and databases, to communicate with each other, with users on the internet, and with your on-premises client computers.

Think of an azure network as a set of resources that links other azure resources.

  • Isolation and segmentation
  • Internet communications
  • Communicate between Azure resources
  • Communicate with on-premises resources
  • Route network traffic
  • Filter network traffic
  • Connect virtual networks
35
Q

Azure ExpressRoute

A

For environments where you need greater bandwidth and even higher levels of security, Azure ExpressRoute is the best approach. ==ExpressRoute provides dedicated private connectivity to Azure that doesn’t travel over the internet.

36
Q

peering

A

enables resources in each virtual network to communicate with each other. These virtual networks can be in separate regions, which allows you to create a global interconnected network through Azure.

37
Q

Azure File Storage

A

File shares in the cloud. Fully managed file shares in the cloud. Uses standard formatting SMB NFS, looks like directories attached to your machine.

38
Q

Azure blog storage

A

Used for very large amounts of data.

Azure Blob Storage is unstructured, meaning that there are no restrictions on the kinds of data it can hold. Blob Storage can manage thousands of simultaneous uploads, massive amounts of video data, constantly growing log files, and can be reached from anywhere with an internet connection.

39
Q

Azure Disk Storage

A

storage for vms and applications

40
Q

3 azure storage tiers to balance costs

A

hot
data accessed frequently

cool
data accessed infrequently. stored for at least 30 days

archive
storage for data rarely access. long term backups.

41
Q

Azure Synapse Analytics

A

imitless analytics service that brings together enterprise data warehousing and big data analytics. You can query data on your terms by using either serverless or provisioned resources at scale. You have a unified experience to ingest, prepare, manage, and serve data for immediate BI and machine learning needs.

42
Q

Azure HDInsight

A

Azure HDInsight is a fully managed, open-source analytics service for enterprises. It’s a cloud service that makes it easier, faster, and more cost-effective to process massive amounts of data. You can run popular open-source frameworks and create cluster types such as Apache Spark, Apache Hadoop, Apache Kafka, Apache HBase, Apache Storm, and Machine Learning Services. HDInsight also supports a broad range of scenarios such as extraction, transformation, and loading (ETL), data warehousing, machine learning, and IoT.

43
Q

Azure Databricks

A

Helps you unlock insights from all your data and build artificial intelligence solutions.

You can set up your Apache Spark environment in minutes, and then autoscale and collaborate on shared projects in an interactive workspace.

Azure Databricks supports Python, Scala, R, Java, and SQL, as well as data science frameworks and libraries including TensorFlow, PyTorch, and scikit-learn.

44
Q

Azure Security Center

A

monitoring service that provides visibility of your security posture across all of your services, both on Azure and on-premises.

45
Q

Azure Key Vault

A

centralized cloud service for storing application secrets such as encryption keys, certificates, and server-side tokens. Key Vault helps you control your applications’ secrets by keeping them in a single central location and providing secure access, permissions control, and access logging.

There are three primary concepts used in an Azure Key Vault: vaults, keys, and secrets.

46
Q

Azure Sentinel

A

A cloud-native SIEM system that a security operations team can use to:

Get security insights across the enterprise by collecting data from virtually any source.
Detect and investigate threats quickly by using built-in machine learning and Microsoft threat intelligence.
Automate threat responses by using playbooks and by integrating Azure Logic Apps.
47
Q

Azure Dedicated Host

A

Provides dedicated physical servers to host your Azure VMs for Windows and Linux.

What are the benefits of Azure Dedicated Host?

Azure Dedicated Host:

Gives you visibility into, and control over, the server infrastructure that's running your Azure VMs.

Helps address compliance requirements by deploying your workloads on an isolated server.
Lets you choose the number of processors, server capabilities, VM series, and VM sizes within the same host.
48
Q

defense in depth

A

The objective of defense in depth is to protect information and prevent it from being stolen by those who aren’t authorized to access it.

A defense-in-depth strategy uses a series of mechanisms to slow the advance of an attack that aims at acquiring unauthorized access to data.

  • The physical security layer is the first line of defense to protect computing hardware in the datacenter.
  • The identity and access layer controls access to infrastructure and change control.
  • The perimeter layer uses distributed denial of service (DDoS) protection to filter large-scale attacks before they can cause a denial of service for users.
  • The network layer limits communication between resources through segmentation and access controls.
  • The compute layer secures access to virtual machines.
  • The application layer helps ensure that applications are secure and free of security vulnerabilities.
  • The data layer controls access to business and customer data that you need to protect.
49
Q

Network Security Groups (NSG)

A

enables you to filter network traffic to and from Azure resources within an Azure virtual network. You can think of NSGs like an internal firewall. An NSG can contain multiple inbound and outbound security rules that enable you to filter traffic to and from resources by source and destination IP address, port, and protocol.

50
Q

Azure Firewall

A

A managed, cloud-based network security service that helps protect resources in your Azure virtual networks. A virtual network is similar to a traditional network that you’d operate in your own datacenter.

51
Q

Azure DDoS protection

A

When you combine DDoS Protection with recommended application design practices, you help provide a defense against DDoS attacks. DDoS Protection uses the scale and elasticity of Microsoft’s global network to bring DDoS mitigation capacity to every Azure region. The DDoS Protection service helps protect your Azure applications by analyzing and discarding DDoS traffic at the Azure network edge, before it can affect your service’s availability.

52
Q

authentication

A

Authentication is the process of establishing the identity of a person or service that wants to access a resource. It involves the act of challenging a party for legitimate credentials and provides the basis for creating a security principal for identity and access control. It establishes whether the user is who they say they are.

53
Q

authorization

A

Authentication establishes the user’s identity, but authorization is the process of establishing what level of access an authenticated person or service has. It specifies what data they’re allowed to access and what they can do with it.

54
Q

How does Azure AD compare to Active Directory?

A

For on-premises environments, Active Directory running on Windows Server provides an identity and access management service that’s managed by your own organization. Azure AD is Microsoft’s cloud-based identity and access management service. With Azure AD, you control the identity accounts, but Microsoft ensures that the service is available globally. If you’ve worked with Active Directory, Azure AD will be familiar to you.

When you secure identities on-premises with Active Directory, Microsoft doesn’t monitor sign-in attempts. When you connect Active Directory with Azure AD, Microsoft can help protect you by detecting suspicious sign-in attempts at no extra cost. For example, Azure AD can detect sign-in attempts from unexpected locations or unknown devices.

55
Q

describe the functionality and usage of Role-Based Access Control

A

Azure provides built-in roles that describe common access rules for cloud resources. You can also define your own roles.

Each role has an associated set of access permissions that relate to that role.

When you assign individuals or groups to one or more roles, they receive all of the associated access permissions.

56
Q

describe the functionality and usage of resource

A

Resources are instances of services that you create, like virtual machines, storage, or SQL databases. An Azure resource is a manageable item that’s available through Azure.

57
Q

Tags (resource tags)

A

Tags are a way to organize resources which can also provide extra information, such as metadata, about your resources. This tag metadata is useful for many different purposes.

58
Q

What Is Azure Policy?

A

helps to enforce organizational standards and to assess compliance at-scale. Through its compliance dashboard, it provides an aggregated view to evaluate the overall state of the environment, with the ability to drill down to the per-resource, per-policy granularity.

59
Q

What are Azure Blueprints?

A

Instead of having to configure features like Azure Policy for each new subscription, with Azure Blueprints you can define a repeatable set of governance tools and standard Azure resources that your organization requires. In this way, development teams can rapidly build and deploy new environments with the knowledge that they’re building within organizational compliance with a set of built-in components that speed the development and deployment phases.

60
Q

Data Protection Addendum (DPA)

A

Defines data protection and terms
Practcies policies
Transfer, retention, deletion,
Etc.

61
Q

Online Services Terms

A

MS legal agreement with it’s customers.

Defines obligations both parties have regarding processing data.

62
Q

Microsoft privacy statement

A

Explains what personal data microsoft collects from you, how it’s used, and for what purpose.

63
Q

identify factors that can affect costs

A

(resource types, services, locations, ingress and egress traffic

64
Q

identify factors that can reduce costs (

A

reserved instances, reserved capacity, hybrid use benefit, spot pricing

65
Q

describe the functionality and usage of the Pricing calculator

A

There’s a whole website where you can go through and add services and estimate the price.

66
Q

describe the functionality and usage of the total cost of ownership calculator

A

With the TCO calc you enter the deets of your on-premises workloads. THen you review the suggested industry average cost for related operational costs. These costs include electricity, network maintenance, and IT labor. You’re then presented with a side-by-side report to compare the costs of running the same workload on prem or in Azure.

67
Q

Describe the functionality and usage of Azure Cost Management.

A

Cost Management shows organizational cost and usage patterns with advanced analytics. Reports in Cost Management show the usage-based costs consumed by Azure services and third-party Marketplace offerings. The reports help you understand your spending and resource use and can help find spending anomalies. Predictive analytics are also available. Cost Management uses Azure management groups, budgets, and recommendations to show clearly how your expenses are organized and how you might reduce costs.

68
Q

describe the purpose of an Azure Service Level Agreement

A

A formal agreement between a service company and the customer. For Azure, this agreement defines the performance standards that Microsoft commits to for you, the customer. A typical SLA breaks down into these sections: Introduction, General terms, SLA details,

69
Q

identify actions that can impact an SLA

A

availability zones

70
Q

describe the service lifecycle in Azure

A

Public Preview and General Availability