Az-900 Flashcards
What is CAPEX
Capital expenditure, cannot fully deduct the cost form fiscal year the assest was paid for in. In premise model.
Cost is fixed, you know exactly how much is being spent (buying servers and equipment for datacenter is CapEx)
What is OPEX
Operating expenses, deducted in the same year they are made (cloud computing)
What is elasticity in cloud computing ?
Cloud computing feature that allows to cover peaks and valleys of demand when data/usage changes
What is reliability ?
Cloud computing feature that offers high availability against failures, allows fast disaster recovery
What is fault tolerance ?
Form of redundancy (expensive one)
Fault Tolerance simply means a system’s ability to continue operating uninterrupted despite the failure of one or more of its components. This is true whether it is a computer system, a cloud cluster, a network, or something else. In other words, fault tolerance refers to how an operating system (OS) responds to and allows for software or hardware malfunctions and failures.
An OS’s ability to recover and tolerate faults without failing can be handled by hardware, software, or a combined solution leveraging load balancers(see more below). Some computer systems use multiple duplicate fault tolerant systems to handle faults gracefully. This is called a fault tolerant network.
What is PaaS ?
Platform as a Service
Azure example: Azure Logic Apps, Azure Functions, Azure Web jobs, Azure Automation
Pizza example: Order delivery Pizza to home
Azure Logic Apps ?
Cloud-based platform for creating and running automated workflows that integrate your apps, data, services, and systems
Azure Web Jobs
WebJobs is a feature of Azure App Service that enables you to run a program or script in the same instance as a web app, API app, or mobile app. There is no additional cost to use WebJobs.
You can use the Azure WebJobs SDK with WebJobs to simplify many programming tasks. WebJobs is not yet supported for App Service on Linux
Azure Automation ?
New service in Azure that allows you to automate your Azure management tasks and to orchestrate actions across external systems from right within Azure. It is built on PowerShell Workflow, so you can take advantage of the language’s many features.
Azure Automation delivers a cloud-based automation, operating system updates, and configuration service that supports consistent management across your Azure and non-Azure environments. It includes process automation, configuration management, update management, shared capabilities, and heterogeneous features.
What is SaaS ?
Software as a Service
Azure example: Share point, Onedrive for Business, Teams, Power Platform
Pizza example: Eat Pizza at restaurant
What is IaaS ?
Infrastructure as a Service
Azure example: Azure Compute, Azure Storage
Pizza example: Supermarket Pizza
What is Public Cloud ?
Service provided by 3rd party provider, hardware can be shared among multiple tenants (Azure office 365)
What is Private Cloud ?
Service provided by 3rd party provider, hardware is only used by single company, which often owns the the hardware and data center (Azure Stack)
What is Hybrid Cloud ?
Combination of public and private cloud, with automation and orchestration between the two (Azure Stack)
Azure Stack is a portfolio of products that extend Azure services and capabilities to your environment of choice—from the datacenter to edge locations and remote offices. Build and deploy hybrid and edge computing applications and run them consistently across location boundaries.
What is Community Cloud ?
Hardware is shared between different organizations from a specific community with common concerns (security, compliance, jurisdiction etc..). Governamental: Azure Government, Azure China, Azure Germany
What is Azure Active Directory ?
Azure Active Directory (Azure AD) is a cloud-based identity and access management service. This service helps your employees access external resources, such as Microsoft 365, the Azure portal, and thousands of other SaaS applications. Azure AD also helps them access internal resources. These are resources like apps on your corporate network and intranet, along with any cloud apps developed by your own organization.
What is Network Security Group ?
An Azure Network Security Group (NSG) is a core component of Azure’s security fabric. Leveraging an NSG, you can filter traffic to and from Azure resources that you have commissioned on an Azure Virtual Network (VNet).
At its core, an NSG is effectively a set of access control rules you assign to an Azure resource. It inspects inbound and outbound traffic and uses these rules to determine whether it should grant or deny access to a particular network packet. At a high level, Azure groups NSG rules into inbound and outbound. The management and configuration of these rules are similar to those you find on a traditional firewall. Using the Azure Portal, Azure PowerShell, or Azure CLI, you can manage an Azure NSG and specify the source and destination IPs, port, and protocol.
What is Azure Traffic Manager ?
*** DNS based traffic load balancer
Azure Traffic Manager is a DNS-based traffic load balancer. This service allows you to distribute traffic to your public facing applications across the global Azure regions. Traffic Manager also provides your public endpoints with high availability and quick responsiveness.
Traffic Manager uses DNS to direct the client requests to the appropriate service endpoint based on a traffic-routing method. Traffic manager also provides health monitoring for every endpoint. The endpoint can be any Internet-facing service hosted inside or outside of Azure. Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region.
Azure provides a suite of fully managed load-balancing solutions for your scenarios.
1) If you want to load balance between your servers in a region at the application layer, review Application Gateway.
2) If you need to optimize global routing of your web traffic and optimize top-tier end-user performance and reliability through quick global failover, see Front Door.
3) To do network layer load balancing, review Load Balancer.
What is a load balancer designed for layer 7 (application)? (one) a. Load Balancer b. Traffic Manager c. Application Gateway d. Network Security Group
c. Application Gateway
What is Application Gateway ?
** Basically a load-balancer
Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Traditional load balancers operate at the transport layer (OSI layer 4 - TCP and UDP) and route traffic based on source IP address and port, to a destination IP address and port.
Application Gateway can make routing decisions based on additional attributes of an HTTP request, for example URI path or host headers. For example, you can route traffic based on the incoming URL. So if /images is in the incoming URL, you can route traffic to a specific set of servers (known as a pool) configured for images. If /video is in the URL, that traffic is routed to another pool that’s optimized for videos.
What is Azure Service Health ?
Azure Service Health is a suite of tools that provide personalized guidance and support when issues with Azure services affect you.
Track events:
- Service issues
- Planned maintenance
- Health advisories
- Manage health alerts
What is Compliance Manager ?
- Compliance Manager is a workflow-based risk assessment dashboard within the Trust Portal that enables you to track, assign, and verify your organization’s regulatory compliance activities related to Microsoft professional services and Microsoft cloud service.
- Enables you to track, assign, and verify your organization’s regulatory compliance activities related to Microsoft professional services and Microsoft cloud services.