az-900 Flashcards
Scalability
adjust resources to meet demand. Pay for what you use.
Vertical scaling
adding more resources, add CPU or RAM to an existing server or VM to increase its capacity. (Up or Down)
Horizontal scaling (elastic scaling)
adding or removing servers or instances to handle increased load. (In & Out). Add VMs or containers. (Auto or manual)
Reliability
a system to recover from failures and continue to function
Elasticity
scale up or down their IT infrastructure to meet changing demands. (Automatic scaling)
Predictability
forecasting performance or cost.
Security
data encryption identity and access management.
Governance
teams provide oversight and monitoring features to maintain and improve security posture over time.
Manageability
managing cloud resources
Agility
cloud-based resources can be deployed and configured quickly as your application requirements change. Quickly and easily allocate and deallocate resources as needed. (Scale quickly)
Performance predictability
predict the resources needed to deliver to ensure a satisfying experience for your customers.
Cost predictability
predict the cost of the cloud spend.
Management of the cloud
managing your cloud resources.
- Automatically scale resource deployment based on need.
- Deploy resources based on a preconfigured template, removing the need for manual configuration.
- Monitor the health of resources and automatically replace failing resources.
- Receive automatic alerts based on configured metrics, so you’re aware of performance in real time.
Management in the cloud
how you’re able to manage your cloud environment & resources. You can manage these:
- Through a web portal.
- Using a command line interface.
- Using APIs. (Application programming interface)
- Using PowerShell.
IaaS
you manage Applications, runtimes, security & integration & databases, data, O/S, middleware
Region
a group of multiple datacenters (Availability zones) & will generally contain 3 AZ.
PaaS
you manage applications & data
Azure Region pairs
Most Azure regions are paired with another region within the same geography (such as US, Europe, or Asia).The paired regions are at least 300 miles apart.
Sovereign regions
Are a subset of Azure regions that are dedicated to hosting data that has specific compliance and regulatory requirements, such as data sovereignty, residency, and privacy. These regions are designed to provide additional data protection and compliance measures, including isolated network connectivity and data replication within the same geographic region.
Availability zones - Availability zones are primarily for VMs, managed disks, load balancers, and SQL databases.
a physical location made up of 1 or more data centers. Equipped with independent power, cooling, and networking. Set up to be an isolation boundary. If 1 zone goes down, the other continues working. They are connected through high-speed, private fiber-optic networks.
Azure datacenters
are unique physical buildings located all over the globe that house a group of networked computer servers.
Contains a number of physical servers with their own power, cooling, & networking infrastructure
A resource group and a resource can be in 2 different locations (T or F)
True
A resource can only be in 1 resource group. (T or F)
True
Subscription:
are a unit of management, billing, and scale, allow you to logically organize your resource groups and facilitate billing.
Billing boundary
how an Azure account is billed for using Azure. You can create multiple subscriptions for different types of billing requirements. Azure generates separate billing reports and invoices for each subscription so that you can organize and manage costs.
Access control boundary
Azure applies access-management policies at the subscription level. Allowing you to manage and control access to the resources that users provision with specific subscriptions.
Environments
create subscriptions to set up separate environments for development and testing, security, or to isolate data for compliance reasons. Resource access control occurs at the subscription level.
Organizational structures
You can create subscriptions to reflect different organizational structures. EX: you could limit one team to lower-cost resources, while allowing the IT department a full range. This design allows you to manage and control access to the resources that users provision within each subscription.
Billing
You can create additional subscriptions for billing purposes. Because costs are first aggregated at the subscription level, you might want to create subscriptions to manage and track costs based on your needs. You might want to create one subscription for your production workloads and another subscription for your development and testing workloads.
Azure management groups
manage access, policies, and compliance across multiple subscriptions. Offer a higher level of scope above individual subscriptions.
VMs (IaaS offering)
provide an abstraction layer of CPU, memory and storage.
Containers
virtualize the OS. Can quickly restart if there’s a crash or hardware interruption. Azure supports Docker.
Azure Functions (PaaS offering) a serverless solution
that allows you to write less code in the cloud w/o the need to manage the underlying servers, infrastructure or OSs.
Azure Virtual machine Scale Sets (VMSS) (IaaS offering):
create and manage a group of identical and load-balanced virtual machines.
Availability Sets (VM AS)
Ensure that VMs stagger updates and have varied power and network connectivity, preventing you from losing all your VMs with a single network or power failure.
Update domain
groups VMs that can be rebooted at the same time. Apply updates while knowing that only 1 update domain grouping will be offline at a time. All of the machines in one update domain will be updated. An update group going through the update process is given a 30-minute time to recover before maintenance on the next update domain starts.
Fault domain
groups your VMs by common power source and network switch. By default, an availability set will split your VMs across up to 3 fault domains. Helps protect against a physical power or networking failure by having VMs in different fault domains (thus being connected to different power and networking resources).
Azure Virtual Desktop (AVD)
a desktop virtualization and application virtualization service that runs on the cloud and enables users to use a cloud-hosted version of Windows (Windows 10 and 11 desktop versions) from anywhere in the world.
Containers
provide a virtualization environment where you can run multiple instances of applications on a single physical or virtual host.
Azure Container Instances (ACI) (PaaS offering)
Runs a container or pod of containers in Azure w/o having to manage any VMs.
Azure Container App (PaaS offering)
like container instances that can load balance and scale.
Azure Kubernetes Service (AKS) (PaaS offering)
Easy to deploy, manage, and scale containerized applications. Uses the open source Kubernetes (KB) software.
Azure App Service (PaaS offering):
build and host web apps, background jobs, mobile back-ends and RESTful APIs in the programming language of your choice w/o managing infrastructure.
Web Apps
hosting web apps by using ASP.NET, ASP.NET Core, Java, Ruby, Node.js, PHP, or Python. You can choose either Windows or Linux as the host OS.
API Apps:
you can build REST-based web APIs by using your choice of language and framework. You get full Swagger support and the ability to package and publish your API in Azure Marketplace. The produced apps can be consumed from any HTTP- or HTTPS-based client.
WebJobs
run a program (.exe, Java, PHP, Python, or Node.js) or script (.cmd, .bat, PowerShell, or Bash) in the same context as a web app, API app, or mobile app. They can be scheduled or run by a trigger. WebJobs are often used to run background tasks as part of your application logic.
Mobile Apps:
build a backend for iOS and Android apps. With just a few actions in the Azure portal, you can:
= Store mobile app data in a cloud-based SQL database.
- Authenticate customers against common social providers, such as MSA, Google, Twitter, and Facebook.
- Send push notifications.
- Execute custom back-end logic in C# or Node.js.
Azure DNS:
a hosting service for DNS domains that provides name resolution by using Microsoft Azure infrastructure. By hosting your domains in Azure, you can manage your DNS records using the same credentials, APIs, tools, and billing as your other Azure services.
Azure Public DNS
is a hosting service for DNS domains. By hosting your domains in Azure, you can manage your DNS records by using the same credentials, APIs, tools, and billing as your other Azure services.
Azure Private DNS
is a DNS service for your virtual networks. Manages and resolves domain names in the virtual network without the need to configure a custom DNS solution.
Azure DNS Private Resolver
enables you to query Azure DNS private zones from an on-premises environment and vice versa without deploying VM based DNS servers.
Point-to-site virtual private network (P2S VPN)
connections are from a computer outside your organization back into your corporate network. In this case, the client computer initiates an encrypted VPN connection to connect to the Azure virtual network. Useful for telecommuters who want to connect to Azure VNets from a remote location, frome home or a conference.
Site-to-site virtual private networks (S2S VPN)
link your on-premises VPN device or gateway to the Azure VPN gateway in a virtual network. The devices in Azure can appear as being on the local network. The connection is encrypted and works over the internet.
Azure ExpressRoute:
a dedicated private connectivity to Azure that doesn’t travel over the internet. Useful for environments where you need greater bandwidth and even higher levels of security.