AZ-900 Flashcards
What is High Availability?
High Availability refers to a set of technologies that minimize IT disruptions by providing business continuity of IT services through redundant, fault-tolerant, or failover-protected components inside the same data centre
What is Fault Tolerance?
FT describes how Azure will ensure you have zero downtime for their services
What is Disaster Recovery?
Disaster Recovery is a business continuity strategy that helps organizations secure data, applications, and workloads during planned or unplanned outages
What is scalability?
Scalability refers to scaling up or out to handle increased load.
What is elasticity?
Elasticity is the ability to quickly increase or decrease computer processing and resources. It is the ability of the system to scale automatically - basically auto-scaling
What is Capex vs Opex?
CapEx is money spent aquiring or maintaining fixed assets.
OpEx is the cost of running on a daily basis
What are IaaS, PaaS and Saas?
IaaS provides servers, storage and networking as a service.
PaaS is a superset of IaaS and includes middleware such as db management tools.
SaaS is a service built on top of PaaS, such as Office365
What are the pros and cons of private Cloud?
Pros:
- complete control of your infrastructure
- benefits of public Cloud
- better security and privacy
Cons:
- maintenance
- staffing
What are the pros and cons of Public Cloud?
Pros:
- no purchase of hardware
- low monthly fees
Cons:
- no control of features and versions
- no physical access
What is Private Cloud?
The private cloud is defined as computing services offered either over the Internet or a private internal network and to selected users only instead of the general public.
What is Public Cloud?
Public Cloud is Azure, AWS, GCP. No upfront costs, but monthly usage costs. Little control over services and infrastructure
What is a Hybrid Cloud model?
Hybrid Cloud is the best of Public and Private, but can be complex
What are the Cloud Service models?
IaaS, PaaS and SaaS are the Cloud Service models.
What is the Azure Marketplace?
A means to use and integrate 3rd party products and services.
What are the Cloud Architecture models?
Private, Public and Hybrid are the Cloud Architecture models.
What is a region in Azure?
A region is a set of datacentres deployed within a latency-defined perimeter connected by a low-latency network.
What are paired regions?
Paired regions:
- are in the same geographic area
- enable failover from primary to secondary region
- enable one region to be updated before its pair
- some services use paired regions for replication
What is an Availability Zone?
AZs are individual physical locations within a region.
Each zone is made up of one or more datacentres equipped with independent power, cooling, and networking.
What are resource groups are what are the rules?
Resource Groups are containers for resources.
Every resource must be in a resource group.
Each resource can only exist in a single resource group.
Resources can be added or removed to a resource group at any time.
When a resource group is removed or deleted, all of the resources within it are deleted with it.
Resources can be moved from one resource group to another.
Resources from multiple regions can be in the same resource group.
What is ARM?
ARM is Azure Resource Manager.
The Azure Resource Manager is the common architectural layer which all commands must go through to interact with Azure resources. The Resource Manager manages all resources on Azure, and is the only tool that creates resources on Azure.
What are the benefits of ARM?
Group Resource handling - allow resources to be deployed, managed and monitored as a group.
Consistency - resources will be consistent
Access control - ARM makes it easier to assign access rights
Tagging - Tag resources to identify them for future scenarios and for billing purposes
What are the three foundational components of Cloud computing?
Compute, Networking and Storage are the three foundational components of Cloud computing
What ‘as-a-service’ are VMs?
VMs are part of IaaS because the hardware is emulated.
What are Azure Functions?
Azure Functions are single-task services that can take an input, process it, then die.
What are Azure VM scale sets?
Scale sets allow you to create and manage a group of Load Balanced VMs.
The number of VMs can automatically increase or decrease in response to demand or a defined schedule.
Scale sets provide high availability to your applications, and allow you to centrally manage, configure, and update a large number of VMs. With virtual machine scale sets, you can build large-scale services for areas such as compute, big data, and container workloads.
Scale sets are a set of identical VMS
The baseline VM is what is used to copy and scale up
The service itself is free and provides high availability
What is WVD?
WVD is a virtualised version of Windows that runs 100% in the Cloud.
What are the benefits of WVD?
- WVD allows Window 10 licences to be re-used
- Concurrency, multiple users can use the same VM instance
- Access anywhere, Windows 10 can be used from any device that has a browser
- Secure data, Azure Storage can be used to secure your data
What is Azure App Service?
App Service is a managed hosting service for web apps and mobile back-ends.
What is Azure Kubernetes Service?
Azure Kubernetes is an open-source tool for orchestrating and managing container images and applications.
Kubernetes service uses clusters and pods to scale and deploy applications.
In how many regions can a VNet be in?
A VNet belongs in a single region.
What is the benefit of using Subnets?
Subnets allow:
- Resource Grouping - grouped resources are easier to oversee
- Address Allocation - enabling a more efficient way to allocate addresses to resources on a smaller subnet.
- Subnet Security - Network Security Groups can be used to secure individual subnets
What is a VPN used for?
A VPN is used to connect Cloud and on-premise infrastructure.
What does a VPN Gateway use to link an Azure VNet with on-premises infrastructure?
A VPN Gateway uses a VPN tunnel to send encrypted traffic from a VNet to on-premises infrastructure.
What is the difference between a VNet Gateway and a VPN Gateway?
A VNet gateway is a gateway into a virtual network.
A VPN gateway is a type of virtual network gateway. When you create a virtual network gateway resource in Azure, you can select the VPN or ExpressRoute gateway type in Azure.
A VPN gateway sends encrypted traffic between your virtual network and your on-premises location across a public connection. You can also use a VPN gateway to send traffic between virtual networks.
What is an Application Gateway?
An Application Gateway routes traffic based on content, not load. Unlike a Load Balancer which routes based on Load.
An AG works on the http request properties (url and host headers) rather than the IP address and port number.
AG’s support auto-scaling, end-to-end encryption, zone redundancy and multi-site hosting.
An application gateway is similar to a load balancer, but can redirect traffic based on attributes in the HTTP request, the request coming in from the internet. You can have a VM handling video, one handling images and so on. Application Gateways do not handle traffic security, nor manage any Virtual Networks.
What is Express Route?
Express Route is a means of directly connecting your on-premise infrastructure with Azure which does not use the internet.
Express Route enables a private, secure, high-bandwidth / low latency connection. However it is expensive.
What is a Vnet?
Azure virtual network enables Azure resources to securely communicate with each other, the internet, and on-premises networks.
Each VNet belongs to a single region and a single subscription.
What is a Load Balancer?
A Load Balancer distributes and balances the incoming traffic to an application or network.
A load balancer sits in front of two or more Virtual Machines to manage, and balance, the load to the Virtual Machines.
A Load Balancer uses IP addresses and port numbers to determining the receiving VM in the backend pool.
The max number of VMs to manage goes up to 1000. A load balancer ensures only healthy instances receive traffic and will stop sending traffic to any server that does not pass health checks. All ELB types can log traffic that passes through them.
What is a Content Delivery Network?
A CDN stores a cached version of your application on an Edge Node. This keeps a recent copy of your web application and can deliver this much faster to users close to an endpoint.
A CDN provides better performance and less traffic to your main server.
CDNs can handle a LOT more data than a typical web server, which makes it ideal to handle traffic spikes as well. CDNs don’t generally handle individual traffic routing rules nor security.
The content cache is updated as necessary.
What are the Blob Storage types?
Blobs store unstructured data. The Blob storage types are:
- Block
- Append
- Page
What is Block blob storage?
Block storage is the storing of text and binary data up to 4.7TB and is made up of individually managed blocks of data.
Block blobs are used for handling large amounts of data very effectively.
What is an Append Blob?
Append blobs are Block blobs that are optimised for append operations. Append Blobs work well for logging where data is constantly appended.
What is a Page Blob?
A Page Blob is how disks are stored. Any part of the file could be accessed at any time, for example a virtual hard drive.
Page blobs are used for random read/write operations. Picture this like the computing-equivalent of having a scrap piece of paper, or ‘page’ on your desk to scribble notes on that you only need for temporary periods of time.
What are the three Blob Storage pricing tiers?
The Storage pricing tiers are:
- Hot
- Cool
- Archive
What is the Hot Blob storage pricing tier?
The Hot pricing tier is for frequently accessed files. It has lower access times and higher access costs.
What is the Cool Blob storage pricing tier?
The Cool pricing tier has lower storage costs and higher access times. Data remains here for at least 30 days.
What is the Archive Blob storage pricing tier?
The Archive pricing tier has the lowest costs but highest access times.
Archive storage is a very cheap version of blob storage meant to store data that is very infrequently used, such as system backups.
What are the types of Azure Managed Disks?
There are 4 types of Azure Managed Disk:
- HDD
- Standard SSD
- Premium SSD
- UltraDisk
What are Blob containers?
Blob containers on Azure act similar to directories in a file system. They can contain an unlimited number of blobs.
What is Azure File Storage and when would you use it?
File storage is, as the name suggest, perfect for storing files of varying types and sizes.
Use file storage as an extension of your on-premises file systems to never run out of space and also prioritise what data you keep on-premises.
What is Disk Storage?
Disk storage is a full Virtual hard disk that you can access. It is usually attached to a Virtual machine. In fact, when you create a Virtual machine, disk storage is created too.
What must each Azure Storage account have?
Each storage account on Azure must have a unique name, as that is used to identify it on the Internet by giving it a web address.
What is Azure Managed Disk?
Azure manages the disks so you don’t have to worry about backup and uptime.
Azure guarantees size and performance as per the initial agreement.
It is easy to upgrade the disk size and type.
What is HDD Managed Disk?
HDD is a spinning Hard Drive. It is low cost and suitable for backups.
What is Standard SSD Managed Disk?
This is the production standard. It has higher reliability, scalability and lower latency than HDD.
What is Premium SSD Managed Disk?
Premium SSD is super fast and has high performance and very low latency. It can be used for critical workloads.
What is Ultra Disk Managed Disk?
To be used for the most demanding, data intensive workloads with disks available up to 64TB in size.
What are the Azure Databases?
- Cosmos DB
- Azure SQL
- Azure DB for MySQL
- Azure DB for PostgreSQL
- Database Migration Services
What is Cosmos DB?
Cosmos DB is a globally scaled distributed database solution that offers very low latency, a range of tools to interact with the data and near-infinite scaling to handle demand.
Cosmos DB is not meant as a cheap storage service, nor for backup of data. Azure has Archive Data services for that.
What is the Azure Database Migration Service?
Using Azure Database Migration Service, you can migrate almost any kind of database to Azure SQL or SQL Server.
It is recommended by Azure to move your on-premises SQL Server instances to Azure SQL to improve efficiency and lower costs. It is not recommended to just migrate everything, as that is a case-by-case basis. Cosmos DB data is unlikely to match directly to Azure SQL.
What is Azure SQL?
Azure SQL is a fully managed service, which means Microsoft takes care of all the hardware and maintenance tasks for running the database. You only have to worry about using the database for storing and retrieving data.
Azure SQL is compatible with on-premise servers.
What are valid sources when migrating to Azure DB for MySQL using the Azure Database Service ?
Both MySQL and RDS MySQL are valid source databases when migrating to Azure DB for MySQL using the Azure Database Service
What databases are not currently supported migrating to Azure DB for MySQL?
Oracle and PostgreSQL are not currently supported when migrating to Azure DB for MySQL
How do Azure describe the power of a database?
The power of a database is how the data is sorted and indexed, as well as the flexibility in how to get the data out again. Databases are not cheaper, more secure, or more space-efficient than other types of storage.
What is Azure Database for MySQL?
Azure DB for MySQL is a very popular community driven open-source db. It is very robust and stable.
What is Azure database for PostgreSQL?
A very popular choice of relational database. It provides enterprise features like horizontal scaling.
What is Authentication?
Authentication is making sure you are you and confirming your identity. This is most commonly done using a username and password, but could also be with a fingerprint or face recognition.
What is Authorisation?
Authorisation is the provision of access and comes after authentication.
To how many AD tenants can a single user belong?
A single user can belong to a maximum of 500 Azure AD tenants as a member or a guest.
What is first provisioned when an Azure account is setup?
AAD is setup when an Azure account is setup.
What is a Tenant?
A tenant:
- represents an organisation
- is a dedicated instance of AAD that an organisation receives when signing-up to an Azure account
- is completely separate from other AAD tenants
What is a subscription?
- a billing entity, all resources within a subscription are billed together
- cost separation, you can have multiple subscriptions within a tenant to separate costs
- payment, if a subscription isn’t paid, all the resources and services will be stopped
What are the benefits of SSO with AAD?
If SSO is enabled you can seamlessly use applications without having to log in and utilise a single username and password.