Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Azure Fundamentals > Azure Organization and Infrastructure > Flashcards

Azure Organization and Infrastructure Flashcards

1
Q

What is Microsoft Azure ?

A

It is a Microsoft’s public cloud computing platform. Public is a key term meaning it is available to the general public.

Microsoft Azure has over 200 individual products and services which provides a wide number of management and solutions for many business use cases you can think of.

Buil, run and manage application on Microsoft’s global infrastructure (IAAS, PAAS, SAAS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What “managed services” refers to ?

A

PAAS and SAAS
Because they have an extra layer of management applied to them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the main advantage of cloud computing (financially)

A

It is pay as you go.

  • No upfront commitment for resources
  • Billed for the seconds of using services.
  • OPEX : Operational Expenses.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Where are computing resources of Azure ?

A

In multiple datacenters all around the word (regions, zones)

Azure is a set of geographically distributed multiple sets of datacenters positionned all around the world to give them a global footprint.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a region ?

A

A region is defined as a collection of individual datacenters deployed within a single geographic region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is an availability zone ?

A

It is a division construct inside a region that refers to one of multiple physical locations within each individual Azure region.

It is made up of one or more individual datacenter buildings and each one of these individual data centers has its own self-contained construct of independent power, cooling and network capabilities.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the primary purpose of these multiple availability zones inside a single region ?

A

To provide an additional layer of fault tolerance and/or resiliency by offering the ability to replicate your application or whatever business solution that you are using accross multiple availability zones inside the same regions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

True or False: A region must only have 1 datacenter

A

False.
A region can be formed by one or multiple datacenters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

True or False: An availability zone must only be formed by 1 datacenter

A

False
An availability zone can be formed by one or multiple datacenters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Compare the advantages of cloud computing applied to region vs availability zones

A

A region provide : High Availability and Fault Tolerance: Be closer to your end users (multiple regions - deployement). Defend against (unlikely) regional outages.

An Availability Zone provide Fault Tolerance: Deploy resources accross zones. Protect against single point of failures.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the layers of the Traditional IT stack ?

A

Networking
Storage
Servers
Virtualization
Operating System
Middleware
Runtime
Data
Applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the method of interaction with the Azure services ?

A

ARM: Azure Resources Manager. That can be accessed through the Azure Web GUI console, Azure Powershell, Azure CLI, and Rest Client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How are the azure services organized ?

A
  • The foundational services: the physical data center and the physical servers racs themselves, hypervisors capabiities
  • The Core Infrastructure Services: Compute or virtual machines, the storage, the Networking
  • The Managed Services: Platform Services and SAAS.
  • Security & Management Services: not really solutions/services. Used for various security and management functions in relation to the managed solutions, such as authentication, identity, etc.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which layers of the traditional IT stack are managed by the Cloud Provider in IAAS ?

A

Networking
Storage
Servers
Virtualization
Operating System (partially)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which layers of the traditional IT stack are managed by the customer in IAAS ?

A

Operating System
Middleware
Runtime
Data
Applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which layers of the traditional IT stack are managed by the Cloud Provider in PAAS ?

A

Networking
Storage
Servers
Virtualization
Operating System
Middleware
Runtime

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which layers of the traditional IT stack are managed by the customer in PAAS ?

A

Data
Applications

18
Q

Which layers of the traditional IT stack are managed by the Cloud Provider in SAAS ?

A

The full stack:

Networking
Storage
Servers
Virtualization
Operating System
Middleware
Runtime
Data
Applications

19
Q

Which layers of the traditional IT stack are managed by the customer in SAAS ?

A

Nothing. The customer just use the software

20
Q

Example of SaaS

A

Google Docs, Dropbox, PowerBI, Microsoft O365

21
Q

What is ARM ?

A

Azure Resource Manager

It is a centralized management layer for interacting with all azure services whether the channel of interaction is the azure web portal, the command line interface, powershell, an application access (Rest client), etc.

It is the layer where access control (authentication and authorization) is enforced.

22
Q

What are the 3 questions to answer regarding Azure Organization Considerations ?

A
  • How do we organize our Azure Resources and Services ?
  • How do we track who is paying for what ?
  • How do we limit who has access to different sets of resources and doesn’t to other sets of resources ?
23
Q

What are the Hierarchichal layers of an Azure Organization ?

A
  • The Azure Tenant, contains // Organization - Azure AD users
  • Management Groups (optional), which contains // Centralized management of subscriptions
  • Subscriptions, which contains, // Billing agreement
  • Resource Groups, which contains, // Group related resources together
  • Resources // VM, Databases, etc.
24
Q

What are the main fundamentals about Azure Resource Hierarchy ?

A
  • Parent-Child Relationship
  • Access/Policies granted to parent are automatically inherited by child levels
  • Centralized Management
  • Parent can have multiple children - But a child can only have one parent (similar to OS file structure)
25
Q

What is a Tenant ?

A

Each organization has a single tenant.

companyname.com.

It is the organization instance of Azure AD. It is where your users/identity directory exists and acts as a single bucket to manage all users who have access various parts of your azure organization.

26
Q

What is the primary purpose of a management group ?

A

To provide a centralized management component for multiple subscriptions that you want to manage all in one place.

It is optional.

27
Q

What is the primary purpose of a subscription ?

A

To act as a primary billing and access isolation boundary within Azure.

28
Q

What is the primary purpose of a Resource Group?

A

To group together resources that have the same purpose / lifecycle

29
Q

What are the 3 components of the IAM trilogy ?

A
  • Who
  • Can do what
  • On which resources (the scope)
30
Q

Which component of Azure is responsible of the “who” of the IAM trilogy ?

A

Azure Active Directory that manages azure identities

31
Q

Which component of Azure is responsible of the “Can Do What” of the IAM trilogy ?

A

Azure Role-Based Access Control (Azure RBAC)

Provides fine-grained access management to Azure Resources

32
Q

Which component of Azure is responsible of the “on which resources” of the IAM trilogy ?

A

The scope : which level in Azure Resource Hierarchy

33
Q

What is the Azure Active Directory ?

A

It is a cloud based identity service. There is one per tenant. Then one per organization.

34
Q

How is an identity called in Azure AD ?

A

A security principal

35
Q

What is a role

A

A role is a collection of specific permissions

36
Q

Which service in Azure provides the visibility on what happens in the Azure environment ?

A

Azure Monitor

37
Q

What are the 2 separate components of Azure Monitor

A
  • Logs
  • Metrics
38
Q

Example of Logs

A

Activity Logs (who created the resouce and when)
OS logs : Windows events

39
Q

Example of Metrics (Telemetry based performance data)

A
  • CPU Utilization
  • Website Latency
40
Q

Where are logs and metrics stored ?

A

In “Stores”

41
Q

Which actions can be taken on the stores ?

A
  • Insights (Application, Container, VM, Monitoring solutions)
  • Visualization (Dashboards, Views, PowerBI, Workbooks)
  • Analysis (Metric Analytics, Log Analytics)
  • Response (Alerts, autoscale)
  • Integration (Event hub, Logic Apps, Export APIs)
42
Q
A

Azure Fundamentals (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions