Cloud Architecture Terminologies Flashcards

1
Q

What are the five aspects of cloud architecture terminology

A, S, E, F, D

A
  1. Availability
  2. Scalability
  3. Elasticity
  4. Fault Tolerance
  5. Disaster Recovery
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

_________: Your ability to ensure a service remains available.

A

Availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

_____: Your ability to grow or shrink rapidly or unimpeded

A

Scalability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

The ability to automatically shrink and grow to meet demand

A

Elasticity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

The ability to prevent a failure

A

Fault Tolerance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

The ability to recover from a failure

A

Disaster Recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a fundamental aspect of high availability?

A

No single point of failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Types of Scalability

V, H

A
  1. Vertical scaling

2. Horizontal scaling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is it when you add more capacity (more or bigger processors, more or faster storage) to existing infrastucture?

A

Vertical Scaling (scaling up)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is it when you add more of the same infrastructure (e.g. more servers)?

A

Horizontal Scaling (scaling out)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Removing more servers of the same size

A

Scaling in

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Adding more servers of the same size

A

Scaling out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is an example of horizontal scaling on Azure?

A

Using Azure VM Scale Sets - automatically increase or decrease in response to demand or a defined schedule

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

A physical server wholly used by a single customer

A

Dedicated server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Five considerations to having a dedicated server

GUOCS

A
  1. You have to guess your capacity
  2. Upgrading will be slow and expensive
  3. Limited by your operating system
  4. Multiple apps can result in conflicts in resource sharing
  5. You have a guarantee to security and privacy and full utilization of underlying resources.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

This allows you to run multiple ____________ on one machine

A

Virtual Machines, or VMs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Software layer that lets you run VMs

A

Hypervisor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Five considerations to using a VM

MCOOA

A
  1. Physical server is used by multiple customers
  2. You pay for a fraction of the server
  3. You overpay for underutilized VM capacity
  4. Limited by the guest operating system you chose
  5. Multiple apps on a single VM can conflict with each other.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

You can run multiple _____ within a VM

A

Containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Software layer that allows you to run multiple containers

A

Docker daemon

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

_________ are known as Serverless Compute

A

Functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Four aspects of functions

C, P, CS

A
  1. You upload a piece of code and choose the amount of memory and duration
  2. Only responsible for code and data, nothing else
  3. Only pay for when the code is running, VMs only run when there is code to be executed
  4. Cold Starts are a side effect
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

This is a grouping of multiple data centers

A

Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Number of Azure regions

A

58 regions in 140 countries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

A discreet market of two or more regions that preserves data residency and compliance boundaries

A

Geography

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

The five Azure geographies

U, G, C, B, M

A
  1. United States
  2. Azure Government
  3. Canada
  4. Brazil
  5. Mexico
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Each region is _____ with another region 300 miles away

A

Paired

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

This is done with paired regions to ensure no outages

A

Only one region is updated at a time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Some services use paired regions for this

A

Disaster recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Some services use paired regions for this

A

Disaster recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Azure has these to meet compliance or legal reasons

A

Specialized regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Name four specialized regions

D, GV, GI, T

A
  1. US DoD Central
  2. US Gov Virginia
  3. US Gov Iowa
  4. Three undisclosed regions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Physical location made up of one or more datacenters

A

Availability Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

A region will generally have this many Availability Zones

A

Three

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

____ regions do not have support for availability zones

A

Alternate or other

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

An availabilty zone in a region has a combination of these two domains
(F, U)

A
  1. Fault

2. Update

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Logical grouping of hardware to avoid a single point of failure in an AZ

A

Fault Domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

_____ domains ensure your resources do not go offline, domains are updated one at a time.

A

Update domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Logical grouping of VMs that are different fault/update domains to avoid downtime

A

Availabilty Sets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Name six Azure compute services

V, C, K, S, F, B

A
  1. Virtual Machines
  2. Container Services
  3. Kubernetes Services
  4. Service Fabric
  5. Functions
  6. Azure batch
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

Most common type of compute service

A

Virtual Machine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Run ______ apps on Azure without provisioning servers or VMs

A

Azure Container Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Easy to deploy, manage and scale containerized applications

A

Azure Kubernetes Service (AKS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Easy to package, deploy and manage scalable and reliable microservices

A

Azure Service Fabric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Event-driven, serverless ______ run code with provisioning or managing servers

A

Azure Functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

plans, manages and schedules your ______ processes across 100+ jobs in parallel

A

Azure Batch Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Name eight storage services

B, D, F, Q, T, DB, A, DL

A
  1. Blob
  2. Disk
  3. File
  4. Queue
  5. Table
  6. Data Box
  7. Archive
  8. Data Lake
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Store very large sized and volume of unstructured files

A

Blob Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Virtual volume, you can choose SSD or HDD

A

Disk Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

shared volume you can access like a file server, eg SMB

A

Azure File Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Data store for reliably delivering messages between application

A

Azure Queue Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

A NOSQL data store that stores unstructured data without schema

A

Azure Table Store

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Briefcase computer designed to move terabytes or petabytes of storage

A

Azure Data Box

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Storage that allows you to store any volume or structured or unstructured data

A

Azure Data Lake

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Azure Database Services

C, S, M, SV, S, DM, R, T

A
  1. Cosmos DB
  2. SQL Server
  3. MySQL/Postgres/Maria
  4. SQL Server on VMs
  5. Synapse
  6. Database Migration Service
  7. Cache Redis
  8. Table Service
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Fully managed NOSQL database designed for scale

A

Cosmos DB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

fully managed datawarehouse

A

Synapse

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Migrates database to the cloud

A

Azure Database Migration Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

frequently used and static data for low latency

A

Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Azure Application Integration Services

N, A, SB, SA, L, AM, Q

A
  1. Azure Notifications Hub
  2. API Apps
  3. Service Bus
  4. Stream Analytics
  5. Logic Apps
  6. API Management
  7. Queue Storage
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Sends push notifications to any platform from any back end

A

Azure Notifications Hub

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Quickly build and consume APIs in the cloud. Routes APIs to Azure Services

A

Azure API Apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Reliable cloud messaging as a service (MaaS) and simple hybrid integration

A

Azure Service Bus

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

Serverless, real-time analytics from the cloud to the edge

A

Azure Stream Analytics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

Schedule, automate and orchestrate tasks, business processes and workflows. Integration with enterprise SaaS and enterprise applications

A

Azure Logic Apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

Hybrid, multi-cloud management platform for APIs across all environments

A

Azure API Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

data store for queuing and reliably delivering messages between applications

A

Azure Queue Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

Developer and Mobile Tools

SS, AS, VS, X

A
  1. SignalR Service
  2. App Service
  3. Visual Studio
  4. Xamarin
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Real-time messaging service (like Pusher)

A

Azure SignalR Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

Service for deploying and scaling web applications with .NET, node.js, java, python and PHP (like Heroku)

A

Azure App Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

IDE designed for creating apps for Azure

A

Visual Studio

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

Mobile app framework

A

Xamarin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

Azure DevOps Services

B, P, R, TP, A, DL

A
  1. Boards
  2. Pipeline
  3. Repos
  4. Test Plans
  5. Artifacts
  6. DevTest Labs
74
Q

Deliver value to your users using proven agile tools to plan, track and discuss work

A

Azure Boards

75
Q

Build, test and deploy with CI/CD that works with any language, platform, and cloud. Connects to github or any other git provider

A

Azure Pipelines

76
Q

Unlimited, cloud-hosted git repos and collaborate to build better code with pull requests and advanced file management.

A

Azure Repos

77
Q

Test and ship too

A

Azure Test Plans

78
Q

Create, host and share packages with team and add artifacts to CI/CD pipeline

A

Azure Artifacts

79
Q

Dev test environments

A

Azure DevTest Labs

80
Q

Allows you to programmatically create Azure resources via JSON template

A

Azure Resource Manager

81
Q

library of pre-made ARM templates provided by the community and partners to launch new projects for a variety of stack scenarios

A

Azure Quickstart

82
Q

logically isolated section of the Azure Network where you launch your Azure resources. You choose a range of IPs using CIDR Range

A

Virtual Network (vNet).

83
Q

range of IP addresses used in a virtual network

A

CIDR range

84
Q

subnets need to have a CIDR range ________ than the vNet to represent their portion

A

smaller

85
Q

___ subnet can reach the Internet

A

Public

86
Q

_____ subnet cannot reach the Internet

A

Private

87
Q

Cloud-native Networking Services

D, VN, LB, AG, NSG

A
  1. DNS
  2. vNet
  3. Load Balancer
  4. Application Gateway
  5. Network Security Groups.
88
Q

provides DNS responses and high domain availability

A

Azure DNS

89
Q

logical isolated section of the Azure network for customers to launch Azure resources

A

Azure Virtual Network

90
Q

OSI Level 4 load balancer

A

Azure Load Balancer

91
Q

OSI Level 7 load balancer can apply a web application firewall

A

Azure Application Gateway

92
Q

virtual firewall at the subnet level

A

Network Security Groups

93
Q

Enterprise/Hybrid Networking Services

FD, ER, VW, C, VNG

A
  1. Front Door
  2. Express Route
  3. Virtual WAN
  4. Connection
  5. Virtual Network Gateway
94
Q

scalable and secure entry point for fast delivery of your global applications

A

Azure Front Door

95
Q

connection between your on-premise to Azure cloud

A

Azure Express Route

96
Q

networking service for networking, security and routing

A

Virtual WAN

97
Q

VPN connection securely connection two Azure local network via IPsec

A

Azure Connection

98
Q

site-to-site VPN connection between an Azure virtual network and your local network

A

Virtual Network Gateway

99
Q

operates at the DNS layer to direct incoming DNS requests based on the routing method of your choice

A

Azure Traffic Manager

100
Q

allows you to host your domains names on Azure

A

Azure DNS

101
Q

evenly distributes incoming network traffic across a group of backed resources or servers

A

Azure Load Balancer

102
Q

Two configurations for Azure Load Balancer

A

Public and private

103
Q

allows you to group together identical VMs and automatically increase or decrease the amount of servers

A

Scale sets

104
Q

types of scenarios you set up scale sets

C, S

A
  1. change in CPU, memory, disk and network performance

2. predefined schedule

105
Q

network of internet connected objects able to collect and exchange data

A

IoT Services

106
Q

lot Services

C, H, E

A
  1. IoT Central
  2. IoT Hub
  3. IoT Edge
107
Q

connects your IoT devices to the cloud

A

IoT Central

108
Q

Enables secured communication between IoT application and devices it manages

A

IoT Hub

109
Q

Allows data processing and analysis nearest the IoT devices

A

IoT Edge

110
Q

Big Data and Analytics Services

S, H, D, DLA

A
  1. Synapse
  2. HDInsight
  3. Databricks
  4. Data Lakes Analytics
111
Q

runs SQL queries against large databases for reporting

A

Azure Synapse

112
Q

analytics software for running Hadoop, Kafka and Spark

A

HDInsights

113
Q

Spark-based analytics platform

A

Azure Databricks

114
Q

On-demand analytics job service that simplifies big data

A

Data Lake Analytics

115
Q

AI/ML Services

A
  1. Azure Machine Learning Service

2. Machine Learning Studio

116
Q

service that allows you to run pipelines to automate ML workflows

A

Azure Machine Learning Service

117
Q

Aspects of Serverless Services

E, A, M

A
  1. Event-driven scale
  2. Abstraction of servers
  3. micro billing
118
Q

Serverless Services

F, B, L, E

A
  1. Functions
  2. Blob storage
  3. Logic Apps
  4. Event grid
119
Q

run small amounts of code as serverless functions in several languages

A

Azure functions

120
Q

Serverless object storage.

A

Blob Storage

121
Q

build serverless workflows composed of Azure functions

A

Logic Apps

122
Q

pub/sub messaging system to allow you to react to events and trigger other cloud services

A

Event Grid

123
Q

interactive, authenticated, browser-accessible shell for managing Azure resources

A

Azure Cloud shell

124
Q

command line interface for managing Azure resources

A

Azure CLI

125
Q

Microsoft Security Development Lifecycle

A

the SDL is a mandatory MS policy embedding security and privacy in software and culture

126
Q

Azure Security Policies

A

AP evalulates resources in Azure by comparing the properties of those resources to business rules (Policy Definitions - described in JSON)

127
Q

Azure Role-Based Access Control (RBAC)

U, G, SP

A
  1. User - individual with a profile in Azure AD
  2. Group - set of users in AAD
  3. Service Principal - security identity used by applications or services to access specific Azure resources
128
Q

RBAC - Scope

A
set of resources that access for the Role Assignment applies to. 
Management Group
     - > Subscriptions
            -> Resource groups
                 -> resources
129
Q

____ allows organizations to take advantage of Microsoft’s unused capacity with significant cost saving

A

Spot VMs

130
Q

T/F: Spot VM offers high availability guarantees.

A

False

131
Q

Spot VMs are great for …

A

workloads that can handle interruptions such as batch processing jobs, dev/test environments, large compute workloads, and more.

132
Q

Which of the following help you save money by committing to one-year or three-year plans for multiple products?

A

Azure reservations

133
Q

A 99.99% VM uptime SLA is offered when ?

A

two or more VMs are deployed across two or more Availability Zones within an Azure region.

134
Q

a tool that helps in estimating cost savings resulting from migrating workloads to Azure.

A

Azure Total Cost Ownership (TCO) Calculator

135
Q

business metrics to measure availability as part of an SLA agreement

A

Mean Time to Recover (MTTR) is the average time it takes to restore a component after a failure.
Mean Time Between Failures (MTBF) is how long a component can reasonably expect to last between outages.

136
Q

is the maximum acceptable time an application is unavailable after an incident.

A

Recovery time objective (RTO)

137
Q

is the maximum duration of data loss that’s acceptable during a disaster.

A

Recovery point objective (RPO)

138
Q

PREVIEWS ARE PROVIDED

A, F, Av, S, W

A

“AS-IS,” “WITH ALL FAULTS,” AND “AS AVAILABLE,” AND ARE EXCLUDED FROM THE SERVICE LEVEL AGREEMENTS AND LIMITED WARRANTY

139
Q

gives the tenant (that is, consumer or customer) maximum control over cloud resources.

A

IaaS

140
Q

Advantages of a private clouds

F, S, S

A

More flexibility: An organization can customize its cloud environment to meet specific business needs.
Improved security: Resources are not shared with others, so higher levels of control and security are possible.
High scalability: Private clouds afford the same scalability and efficiency as a public cloud.

141
Q

Reasons for using private cloud

A

government agencies, financial institutions, and other midsize to large organizations with business-critical operations seeking enhanced control over their environments.

142
Q

PaaS features

SL, I, A

A

Software Licensing - avoid the expense and complexity normally associated with buying and managing software licenses.

Infrastructure - tenants do not need to manage underlying application infrastructure, middleware, container orchestrators (such as Kubernetes), development tools, and other resources.

Application/Service management - allows developers to focus on building and managing their own applications and services, while the cloud service provider typically manages everything else.

143
Q

enables systems to continue operating properly in the event of failure or when there are faults within components.

A

Fault tolerance

144
Q

__________ application has components running in both Azure and on premises.

A

A hybrid cloud

145
Q

Azure has three cloud deployment models

A

Private cloud
Public cloud
Hybrid cloud

146
Q

gives you the tools to plan for, analyze and reduce your spending to maximize your cloud investment.

A

Cost Management

147
Q

is a service that assesses your organization’s current workloads in on-premises datacenters

A

Azure Migrate

148
Q

allows you to mix and match different combinations of Azure services to see an estimate of the costs.

A

The Azure pricing calculator

149
Q

is a service that, among other things, identifies virtual machines with low utilization from a CPU or network usage standpoint.

A

Azure Advisor

150
Q

allow you to prepay for one-year or three-years of virtual machine or SQL Database compute capacity. Pre-paying will allow you to get a discount on the resources you use.

A

Azure Reservations

151
Q

an analytical service that encompasses enterprise data warehousing and big data analytics.

A

Synapse

152
Q

Azure Synapse has four components

T, Sp, P, St

A

Synapse SQL: Complete T-SQL–based analytics
SQL Pool
SQL On-demand

    Spark: Deeply integrated Apache Spark
    Synapse Pipelines: Hybrid data integration
    Studio: Unified user experience
153
Q

set of data centers deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network

A

Region

154
Q

personalized cloud consultant that helps organizations follow best practices to optimize Azure deployments

A

Azure Advisor

155
Q

used to send encrypted traffic between an Azure virtual network and an on-premises location over the public Internet

A

VPN gateway

156
Q

VPN gateways can be deployed in __________ for resiliency, scalability, and higher availability in virtual network gateways.

A

Azure Availability Zones

157
Q

allows developers/administrators to run and test small pieces of code (called functions) without the worry of managing infrastructure.

A

Azure functions environment

158
Q

solution for any scenario that can operate in isolated containers, including simple applications, task automation, and build jobs.

A

Azure Container Instances

159
Q

scenarios where full container orchestration is needed, (such as service discovery across multiple containers, automatic scaling, and coordinated application upgrades),

A

Azure Kubernetes

160
Q

container that holds related resources for an Azure solution. A resource group can include all the resources for a solution or only the resources to be managed as a group.

A

Resource group

161
Q

makes it possible to extend on-premises networks to connect to Azure over a private connection with the help of a connectivity provider

A

ExpressRoute

162
Q

enables teams of developers to proactively self-manage virtual machines (VMs) and PaaS resources without waiting for approvals.

A

Azure DevTest Labs

163
Q

personalized cloud consultant that helps organizations follow best practices in optimizing their Azure deployments.

A

Azure Advisor

164
Q

is an interactive, authenticated, browser-accessible shell for managing Azure resources.

A

Azure Cloud Shell

165
Q

is a cloud service that helps schedule, automate, and orchestrate tasks, business processes, and workflows to integrate apps, data, systems, and services across enterprises or organizations.

A

Azure Logic Apps

166
Q

simplifies how organizations design and build scalable solutions for app integration, data integration, system integration, enterprise application integration (EAI), and business-to-business (B2B) communication, whether in the cloud, on premises, or both.

A

Logic Apps

167
Q

provides a management layer that enables the creation, updating, and deletion of resources in an Azure subscription, which helps to maintain consistency across environments and allows various level of security on groups as well as individual resources in the groups.

A

Azure Resource Manager (ARM)

168
Q

Azure managed disks are currently available in four disk types:

A

Ultra Disk
Premium Solid-State Drive (SSD)
Standard SSD
Standard Hard Disk Drive (HDD)

169
Q

service tier is a paid service and provides additional mitigation capabilities over the Basic service tier (which is free) that are tuned specifically to Azure virtual network resources.

A

The Azure Standard DDoS

170
Q

is a collection of documentation, implementation guidance, best practices, and tools that from Microsoft that is designed to accelerate customer cloud adoption journeys.

A

The Cloud Adoption Framework

171
Q

is a managed, full-spectrum, open-source analytics service in the cloud for enterprises.

A

Azure HDInsight

172
Q

has several built-in roles that can be assigned to users, groups, service principals, and managed identities. Role assignments can be used to control access to Azure resources.

A

Azure role-based access control (Azure RBAC)

173
Q

______________is a cloud platform built on the foundational principles of security, privacy and control, compliance, and transparency. ___________delivers a dedicated cloud that enables government agencies and their partners to transform mission-critical workloads to the cloud.

A

Azure Government

174
Q

———- makes it is possible to designate limited administration roles for the purpose of managing identity tasks in less-privileged roles. Administrators can be assigned to manage users, assign administrative roles, reset user passwords, manage user licenses, and manage domain names.

A

Azure Active Directory (Azure AD),

175
Q

enables Microsoft Azure applications and users to store and use several types of secret/key data,

A

Azure Key Vault

176
Q

enables a cloud architect or a central information technology group to define a repeatable set of Azure resources that implements and adheres to the organization’s standards, patterns, and requirements.

A

Azure Blueprints

177
Q

Provides customers and partners with easier access to regulatory compliance information.

A

Azure Trust Center

178
Q

is a tool for bringing together signals, making decisions, and enforcing organizational policies.

A

Azure Conditional Access

179
Q

is a managed, cloud-based network security service that protects Azure virtual network resources

A

Azure Firewall

180
Q

are used to filter network traffic to and from Azure resources in an Azure virtual network (VNet). ________contains security rules that allow or deny inbound network traffic to or outbound network traffic from several types of Azure resources.

A

Azure network security groups (NSGs)

181
Q

provides an integrated environment that is especially built for bot development.

A

Azure Bot Service

182
Q

is the process of validating that someone is who he or she claims to be.

A

Authentication