Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Microsoft Learn > AZ-900 (Azure Fundamentals) > Flashcards

AZ-900 (Azure Fundamentals) Flashcards

1
Q

Availability set

A

The spreading of VM’s across multiple servers and racks in the same datacenter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Availability zone

A

Each availability zone is (group of) datacenter that is fully separate from other availability zones, complete with dedicated power, cooling, and data connections. If one zone is compromised, then replicated apps and data are instantly available in another zone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Region pair

A

Region pairs are datacenter regions that are intimately connected, and at least 300 miles apart. They are connected through a dedicated low latency connection.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Geography

A

Geographic regions, such as: Europe, America, Asia, Middle East, etc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Account

A

A connected identity, such as a natural person

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Subscription

A

A logical container used to provision cloud resources. Each subscription will result in a single invoice per month.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Azure AD

A

Your Azure login identity that is provisioned under a specific tenant. It’s the cloud/azure evolution of Active Directory, which is a B2B identity management service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Azure Support plan

A

An additional program that can be requested / used by clients to support them in their onboarding. Contains of access to a develop (for 8 hours, in SLA and per mail), standard support (24/7 mail and phone, SLA within 1 hour), direct access to professionals (training, onboarding, seminars, etc) and Premier access (azure event management and TAM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Scale sets

A

Are sets of VM’s that can be managed and configured as a single unit. For example, a single web-app might require a multiple VM’s. You can create a single scale set (and all it’s required VM’s) to extend application capacity. Works with load balancer and application gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Compute options

A
  • Serverless computing
  • Logic apps
  • Functions
  • Azure app service
  • Container
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Serverless computing

A

Computing without infrastructure management and that is easily scalable, so that you only have to focus on application development.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Logic app

A

A serverless compute model that is based on a graphical interface (WYIWYG editor) which can be used to visually build logic apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Functions

A

A serverless compute model, similar to logic apps, that is based on scripting. Only upload the actual logic script, no need to manage scalability or infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

App service

A

Service that hosts webapps, APIs and webjobs. More than a single script, but still no need to manage entire infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Container

A

Lightweight OS virtualization. Where a VM virtualizes hardware, a container virtualizes the OS. Allows you to divide combined solutions into smaller microservices. E.g. front-end is in one container, back-end and database are in another. If one virtualized OS (container) crashes, it doesn’t affect other containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Storage options

A
  • SQL DB
  • Cosmos DB
  • Blobstorage
  • AzureFiles
  • Azure Queue
  • Disk Storage;
  • Hot, Cool, Arch(ive)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

SQL DB

A

Storage of structured data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Cosmos DB

A

Database that is global automatically, and works schemaless. Can be accessed in multiple DB formats. Structured data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

BlobStorage

A

Storage for Blobs (Binary Large Objects), a form of unstructured data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Datalake storage

A

Hierarchical data that is ready to be analyzed (structured, semi-structured and unstructured data)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Azure Files

A

Fully managed files shares that are available in Server Message Block (SMB) or Network File System (NFS) format, accessible to Windows, Linux and macOS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Azure Queue

A

Service for storing a large number of system messages, accessible via REST API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Disk Storage

A

Block storage to be used by virtual machines, comes in formats such as: HDD, SSD< Premium SSD and Ultra Disk Storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Hot storage

A

Online tier designed for data that is accessed/modified daily. High storage cost, low access cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Cool storage

A

Online tier designed for data that is accessed/modified monthly. Medium storage cost, medium access cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Arch(ive)

A

Offline tier designed for data that is not accessed/modified in intervals shorter than 180 days. Low storage cost, High access cost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Network options

A
  • Virtual network
  • VPN Gateway
  • Network Security group
  • High availability
  • Reliency
  • Load balancer
  • Application gateway
  • Content Distribution Network (CDN)
  • Traffic Manager
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Virtual Network

A

A virtual network in which azure resources can securely communicate with each other

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Multi-tier Web

A
  • Web tier
  • Business tier
  • Data tier
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Web tier

A

Web tier: The top layer including the user interface. This layer parses user interactions and passes the actions to next layer for processing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Business tier

A

Business tier: Processes the user interactions and makes logical decisions about the next steps. This layer connects the web tier and the data tier.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Data tier

A

Data tier: Stores the application data. Either a database, object storage, or file storage is typically used.

33
Q

VPN Gateway

A

Works on the webtier in Azure, and on data tier and service tier on prem. Allows for the creation of connections between cloud and on-prem

34
Q

Network Security Group

A

Group of resources for which certain traffic rules apply. Similar to a firewall. For example, the allowance of UDP connections on port 1337

35
Q

High Availability

A

Means that service will be operating for a long time without interruption

36
Q

Reliency

A

The staying operational during abnormal conditions. E.g. perseverance through traffic spikes, power fluctuations, weather events, maintenance

37
Q

Load Balancer

A

Distributes traffic evenly among webservers. Increases availability and resilience

38
Q

Azure load balancer

A

Load balancer service from Azure. Operates at level four (TCP/UDP) of the OSI-schema.

39
Q

Application Gateway

A

Web traffic load balancer for web applications. Operates at level seven (url-based routing). Allows for secure (HTTPS) transport of data such as images or video.

40
Q

Content Distribution Network

A

Network that distributes (caches) content on geographically dispersed and strategic locations around the world

41
Q

Traffic Manager

A

Redirects end-users to the closest datacenters, for improved latency (packet travel time)

42
Q

Network Security Options

A
  • Azure Firewall
  • Application Gateway
  • Web application firewall
  • DDOS Protection
  • Azure Express Route
  • Azure Information Protection
  • Azure Threat Protection
43
Q

Azure Firewall

A

Firewall service by Azure that protects your virtual network. Protects for inbound and outbound traffic. Can block on port, ip and protocol level (e.g. 80, 192.168.1.1, RDS/FTP)

44
Q

Application Gateway

A

Contains a web application firewall

45
Q

Web Application Firewall

A

Centralized servers that filters invalid requests. For example, SQL injection and XSS attacks are filtered before they reach the web application

46
Q

DDOS Protection

A

Protection against denial of service attacks. Exists in both Basic and Standard form.

47
Q

Basic DDOS Protection

A

Defense against common network-layer attacks through always-on traffic monitoring and real-time mitigation.

48
Q

Standard DDOS Protection

A

Includes same as basic, plus: availability guarantee, cost protection (overcosts are compensated), metrics & alerts, mitigation reports, rapid response support

49
Q

Azure Express Route

A

Private fiber connection from own premise to MS Cloud

50
Q

Azure Information Protection

A

The making confidential of files, e-mails and other data

51
Q

Azure Threat Protection AKA Defender for Identity

A

Protection against attacks, malicious insider actions and includes a ATP portal. Works through analyzing logs including tenant’s users behaviour

52
Q

Security Options

A
  • Defense in Depth
  • Encryption
  • Encryption at rest
  • Encryption in Transit
  • Azure Storage Service Encryption
  • Azure Disk Encryption
  • Transparent Data Encryption
  • Key Vault
53
Q

Defense in Depth

A

Defend not a single layer, but all layers: Data, Application, Compute (VM access), Networking (deny by default), Perimeter (DDOS), Identity (access), Physical (datacenter building)

54
Q

Encryption at rest

A

Encryption of physically stored data

55
Q

Encryption in transit

A

Encryption of data moving on the internet

56
Q

Azure Storage Service Encryption

A

Encryption of Azure storage service. Is standard in blob storage and queue storage

57
Q

Azure Disk Encryption

A

Encryption of the disk for the VM (even when account is breached, data is still encrypted)

58
Q

Transparent Data Encryption

A

Opaque encryption voor databases, is default in SQL DB

59
Q

Key Vault

A

Vault for Passwords, certificates and API keys

60
Q

Azure Policy

A

Allows enforcing rules and standards for resources. E.g. certain tag is required

61
Q

Initiative

A

A collection (/group) of policies.

62
Q

Azure Management Group

A

Allows creation of hierarchical order of resources and apply policies accordingly

63
Q

Blueprint

A

Collection of role assignments, policies, resources and groups. Can be applied to easily roll out an entire environment (for a new web-app for example).

64
Q

Azure Resource Manager

A

Management to to create roles for RBAC, to creates policies, etc

65
Q

Azure Security Center

A

Management console/center to protect azure and hybrid resources, including compliancy. It gives resources a security score depending on whether certain security aspects are met.

66
Q

Azure Monitor Metrics

A

Shows telemetry regarding applications, servers. Also allows for creation of alerts and rule-based auto-scaling

67
Q

Azure Service Health

A

Shows Azure service issues, planned maintenance and other health alerts relevant to tenant usage

68
Q

Trust Center

A

A center where privacy, compliancy and security policies are displayed (general for all Azure clients)

69
Q

Service Trust Portal

A

Portal to review independently available audit reports, which provides details on data protection compliance. E.g. ISO, SOC, NIST, FedRAMP & GDPR.

70
Q

TCO Calculator

A

Calculator for total cost of ownership, mainly to differentiate between costs of on-prem and cloud based workloads

71
Q

Pricing Calculator

A

Calculator to estimate pricing of individual resources in Azure

72
Q

Azure reservations

A

Reserve resources in order to gain discounted prices on certain Azure services

73
Q

Azure Cost Management + Billing

A

Service that helps you understand your Azure bill, manage your account (and subscriptions), monitor and control resource and optimize spending. Includes tools to budget, get alerts and enrich data.

74
Q

SLA Up-Time: 99%, 99.9% (how much downtime)

A

1.66 hrs/week & 7.2hrs/month

10 mins/week & 43.2 mins/month

75
Q

Service Level Agreement (SLA)

A

Formal agreement between a service provider (Azure) and a customer about what level of service is offered. For Azure, this mainly means how much uptime Azure services have

76
Q

Azure Status

A

Service that provides a global overview of the health of Azure services and regions. This is a good place to check if you think Azure has an outage

77
Q

Application SLA

A

Defines the SLA requirements for a specific application. Generally, this is the application built by the tenant (how critical is your webapp, what should be its uptime?). These requirements can be mapped to Azure SLA

78
Q

Composite SLA

A

The combination of multiple SLAs to determine the total SLA. For example, you need a VM (SLA=99.9%) and an application gateway (SLA=99.99%). Composite SLA is calculated as 0.999*0.9999 = 0,9989001 = 99,89001%

Microsoft Learn (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions