(AZ-900 topic) Describe Core Azure Services Flashcards

Question

You are an Azure consultant for Dreamsuites Inc. The company has followed your recommendations to move to Azure DevOps Services. The local data center is slowly being deprecated, so you suggest that Azure DevTest labs will be a useful option for developers. What are some benefits/features that DevTest labs can offer? (Choose all that apply.) - Base Azure VM images - Collect security logs from operating systems - Azure Resource Manager templates - Automatically build and test code projects - Track costs on VM resources

Answer 1

- Base Azure VM images - Azure Resource Manager templates - Track costs on VM resources Azure DevTest labs will allow Dreamsuites to track costs on VM resources. Caps can be set on labs, limiting the number of VM's per user and per lab. A monthly Estimated Cost Trend chart is available in the Azure Portal. Azure DevTest labs can offer Dreamsuites the option to create base Azure VM images. This would be a curated set of VM bases that are configured and approved by the team. Azure DevTest labs does not include the ability to collect security logs from operating systems. However, this is a recommended task for the DevTest VM's, and can be accomplished with the Azure Security Center. Azure DevTest labs does not include the ability to automatically build and test code projects. That is the function of Azure Pipelines, one of the Azure DevOps services. Azure DevTest labs will allow Dreamsuites to use Azure Resource Manager templates. These templates can be used to quickly create new labs, or modify existing labs. Azure DevTest labs are designed for quick setup of development or test environments. Unlike Managed (Classroom) Labs, DevTest Labs are manually created, and are managed by the enterprise. Microsoft does offer Powershell scripts to automate DevTest lab deployment.

Answer 2

- You cannot change the size of the node after creation. - You can change the number of nodes after creating the AKS. - A single instance of your application represents a pod. The Azure Kubernetes Service (AKS) provides a managed orchestration service that makes for easier deployment and management tasks of containers In AKS, you run your application in a node. After creating the AKS, you can change the number of nodes but you cannot change the node size. You cannot change the VM size in an Azure Kubernetes Service (AKS) cluster once the cluster has been deployed. A single instance of your application represents a pod. Node pools do not provide the orchestration of application workloads. Cluster master nodes provide the orchestration of application workloads. Your application workload is not run in pods. Nodes run your application workloads. A single instance of your application represents a pod.

Answer 3

- Azure App Service - Azure Functions Azure App Service enables you to build and host web apps, mobile back-ends, and RESTful APIs in the programming language of your choice without managing infrastructure. Azure Functions is a serverless compute service that enables you to run code-on-demand without having to explicitly provision or manage infrastructure. Use Azure Functions to run a script or piece of code in response to a variety of events.

Answer 4

-Azure Resource Manager templates An Azure Resource Manager template is the framework by which resources are created. They can be used to define and automate the creation of similar resources.

Answer 5

- Each zone has its own isolated power, cooling, and networking. - Availability Zones exist within regions. - Availability Zones protect your instances from the failure of a single datacenter. An Azure Availability Zones are groups of datacenters within a region which have their own isolated power, cooling, and networking. This is to ensure if one part of a local power grid fails, or a major internet outage occurs in a city that it should not impact multiple datacenters. This exists to protect your instances from the failure of entire datacenters. Each availability zone will share part of the load for running every Azure service in a region. Many resource types can benefit from Availability Zones, such as Storage Accounts, Virtual Machines, and Databases

Answer 6

-Use an Application Gateway to route URLs containing the "/image/" path. An Application Gateway is used specifically for routing traffic based on parameters in the traffic itself. This could be all requests to the "/images/" path of the URL being sent to a specific VM. A VPN Gateway is used to securely connect an Azure Virtual Network with an on-premises network. A CDN does not route traffic. A Load Balancer routes all traffic without looking at it.

Answer 7

-A File service in a storage account Azure Files offers fully managed file shares in the cloud that are accessible via the industry standard Server Message Block (SMB) protocol. Azure file shares can be mounted concurrently by cloud or on-premises deployments of Windows, Linux, and macOS.

Answer 8

- Bash - PowerShell The Azure Cloud Shell supports the Bash and PowerShell command-line environments. MS-DOS and Windows are Operating Systems and are therefore not valid options.

Answer 9

-Azure Database for MySQL Azure Database for MySQL is a relational database hosted on the Azure cloud platform. MySQL is the world's most popular open-source database, although an enterprise version is available from Oracle. Of the options listed, this would best meet Verigon's needs. Azure SQL is a Platform as a Service (PaaS) option. Microsoft manages the platform, so a company only has to worry about the database itself and its contents. Azure SQL offers high compatibility with the SQL server. However, Azure SQL is not open-source. Azure Blob Storage would not fit Verigon's database needs. It is unstructured storage, such as text files, videos, or VHD files. SQL server is not, in itself, a cloud-based solution. You could run SQL on a VM in Azure, but you would not have the access control features offered by Azure SQL. Microsoft offers a Data Migration Assistant to help move a SQL Server database to an Azure SQL database. Even so, Azure SQL is not open-source. Azure Cosmos DB is not a relational database. It is known as a "NoSQL" database, as it does not rely on tables, rows, or schemas to organize data. Microsoft also offers the Azure Database for MariaDB. MariaDB is an increasingly popular branch off of the original MySQL.

Answer 10

True. Each subscription can independently fuel a different set of resources within the same customer tenant. Subscriptions can come from different purchase channels and can co-exist independent of each other

Answer 11

False. Azure subscriptions can be bought by the designated currency based on the channel through which one procures, and all major currencies can be used.

Answer 12

True. The following occurs when you add a subscription to an Azure Active Directory tenant: - Users with RBAC roles lose their access. - Service Administrators and Co-Administrators lose their access. - Existing key vaults are inaccessible until the key vault tenant ID is changed. - Managed identities for resources such as Virtual Machines or Logic Apps must be re-enabled or recreated. - A registered Azure Stack must be re-registered.

Answer 13

True. The following occurs when you add a subscription to an Azure Active Directory tenant: - Users with RBAC roles lose their access. - Service Administrators and Co-Administrators lose their access. - Existing key vaults are inaccessible until the key vault tenant ID is changed. - Managed identities for resources such as Virtual Machines or Logic Apps must be re-enabled or recreated. - A registered Azure Stack must be re-registered.

Answer 14

-Availability zone An availability zone consists of several datacenters that have separate power, cooling, and networking equipment. Every region has three separate availability zones to ensure resiliency by physically separating applications and data from datacenter failures. You would not choose virtual machine scale sets. A virtual machine scale set allows you to increase or decrease on demand or by schedule. A virtual machine scale allows you to create load balanced VMs that are identical. You would not choose fault domain. A fault domain defines a set of virtual machines that share a common network switch and power source. A fault domain may protect a set of virtual machines, but will not protect against a datacenter failure. You would not choose update domain. An update domain can allow your application to stay up and running during an update of the application. An update domain will not protect against a datacenter failure.

Answer 15

No. No, you must create a new support request in the Azure portal. You can choose Help + support and select New support request. In the support request, you can select the Issue Type and choose Service and subscription limits (quotas). You should choose the appropriate subscription. On the Quota Type, choose the appropriate database. Under Quota details choose the quota type that you want to increase such as DTUs per server. An Azure policy will not let you change quota restrictions.

Answer 16

- The Dedicated Compute Premium pricing tier of App Service can host up to 100 Hybrid connections. - Only apps hosted in the Dedicated Computer Premium pricing tier or higher can be restored from snapshots. Hybrid connections provide access from the app to an application endpoint in another network. They do not enable an alternate capability to access the application. Each hybrid connection corresponds to a single TCP host and port combination, which means that the hybrid connection endpoint can be on any application and any operating system when a single TCP listening port is accessed. The maximum allowed hybrid connections are as follows: Basic (5), Standard (10), Premium (100), and Isolated (200). Apps can be restored to the previous state based on one of the apps’ snapshots. Azure saves a snapshot of all apps automatically. Snapshots are incremental shadow copies and are more beneficial than regular backups. Snapshots eliminate issues such as storage size limitations, file copy errors due to file locks, and backup configuration issues. All Dedicated Compute pricing tiers run apps on dedicated Azure VMs. Apps in the same App Service plan share compute resources for that plan. The higher tiers can scale-out more VM instances than lower tiers. The Isolated pricing tier provides network isolation by running dedicated Azure VMs on dedicated Azure Virtual Networks. It provides compute isolation to the apps and the maximum scale-out capabilities. The auto swap feature is supported in web apps running in a Windows environment only. Auto swap should be used where the app is to be deployed continuously with zero cold starts and zero downtime for app users. Auto swap is enabled from a slot into production every time the code changes are pushed to that slot. App Service automatically swaps the app into production after it has warmed up in the source slot. The per-app scaling setting is available for Standard, Premium, Premium V2, and Isolated pricing tiers, not Shared or Free tier. Per-app scaling can be enabled at the level of an App Service plan to allow for scaling an app independently from the App Service plan that hosts it. This way, an App Service plan can be scaled to six instances, for example, but an app can be set to use only three. If an app’s Memory quota is exceeded, the app is only restarted. The quotas for apps are CPU (short), CPU (Day), Memory, Bandwidth, and Filesystem. If an app exceeds the CPU (short), CPU (Day), or Bandwidth quota, the app is stopped until the quota resets and all incoming requests result in an HTTP 403 error. If the Filesystem quota is exceeded, any write operation fails. Write operation failures include writes to logs.

Answer 17

-Premium You would select Premium because it is ideal for sensitive applications with high throughput, such as online transactions, and is suited for workloads where an application performs many small transactions at a low latency level. Hot – tier used for data that is frequently accessed. It is more expensive to store data here compared to the Cool and Archive tiers, but cheaper to access Cool – tier used for storing less frequently accessed data, such as archived files, backups, and raw or unprocessed data. Cool is designed for data that is likely to be stored for at least 30 days. Cool storage costs less than Hot storage per GB. Archive –the most cost-effective tier for storing data but is typically more expensive for data retrieval than Hot and Cool tiers. Archive is designed for data that is likely to be stored for at least 180 days, and for systems or scenarios where retrieval latency can be tolerated.

(AZ-900 topic) Describe Core Azure Services Flashcards

AZ-900 topic assess your ability to: Talk about the core Azure architectural components and to also be able to talk about the core resources that are available on Azure Questions for this domain comprise 18% of the total questions for the AZ-900.