Azure Basics

Question 1

What is ASE?

Answer 1

App Service Environment (ASE) is an App Service feature that provides a fully isolated and dedicated environment for securely running App Service apps at high scale. ASEs are appropriate for application workloads that require:
✔ Very high scale.
✔ Isolation and secure network access.
✔ High memory utilization.

Question 2

What is the difference between Availability Set and Availability Zone in Azure?

Answer 2

Availability sets (ASs) provide VM redundancy and availability within a datacenter by distributing VMs across multiple isolated hardware nodes.

Availability zones (AZs) are unique physical locations that span datacenters within an Azure region. Each AZ accesses one or more datacenters that have independent power, cooling, and networking, and each AZ-enabled Azure region has a minimum of three separate AZs.

Question 3

What are the different services provided by Azure Storage?

Answer 3

The Azure Storage platform includes the following data services:

1. Azure Blobs
2. Azure Files
3. Azure Elastic SAN (preview)
4. Azure Queues
5. Azure Tables
6. Azure managed Disks
7. Azure Container Storage (preview)

Question 4

What are the different types of Storage Accounts?

Answer 4

1. Standard general-purpose v2
2. Premium block blobs
3. Premium file shares
4. Premium page blobs

Question 5

What are the Storage Account Endpoints?

Answer 5

Every object that you store in Azure Storage has a URL address that includes your unique account name. The combination of the account name and the service endpoint forms the endpoints for your storage account.

Question 6

What are the different types of Storage Account endpoints?

Answer 6

1. Standard endpoints: max 500 storage accounts per region
2. Azure DNS zone endpoints: up to 5000 storage accounts per regions

Question 7

What are the types of Encryption available for Azure Storage?

Answer 7

1. Encryption at rest
2. Client-side encryption

Question 8

What are the different ways to secure access to Azure Storage?

Answer 8

1. Microsoft Entra integration with RBAC
2. Identity-based authentication over SMB for Azure Files
3. Authorization with Shared Key
4. Authorization using Shared Access Signature (SAS)
5. Active Directory Domain Services with Azure NetApp Files