Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ900 > Describe Azure Architecture and Services > Flashcards

Describe Azure Architecture and Services Flashcards

1
Q

Describe Azure regions, regional pairs, and sovereign regions

A

Region: A region is a geographical area on the planet that contains at least one, but potentially multiple datacenters that are nearby and networked together with a low-latency network.

Regional pair: Pair of Azure Regions within the same geograpical area (ie US, Europe Asia) atleast 300 miles away. In the event of a region wide outage, a failover will occur to the secondary region.

Sovereign Region: instances of Azure that are isolated from the main instance of Azure. You may need to use a sovereign region for compliance or legal purposes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Describe availability zones

A

Consists of physically separate datacenters within an Azure region. Each availability zone is made up of one or more datacenters equipped with independent power, cooling, and networking. If one zone goes down, the other continues working. Availability zones are connected through high-speed, private fiber-optic networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Describe Azure datacenters

A

Facilities with resources arranged in racks, with dedicated power, cooling, and networking infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Describe Azure resources

A

Resources Include (VSVASF):
Virtual Machines
Storage Accounts
Virtual Networks
App Services
SQL Databases
Functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Describe Resource Groups

A

A container to manage and aggregate resources in a single unit.

Resources can only exist in one resource group
Resources can exist in different regions.
Resources can be moved to different resource groups
Applications can utilize multiple resource groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Describe subscriptions

A

Provides authenticated and authorized access to Azure accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Describe management groups

A

Management groups can include multiple subscriptions. Subscriptions inherit conditions applied to the management groups.

Ie: three different subscriptions: dev, test, and production. These can be placed in the the management group level to apply the same policies to all subscriptions. Note that each account can have multiple management groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Describe the hierarchy of resource groups, subscriptions, resources, and management groups

A

Management groups contain subscriptions
Subscriptions contain resource groups
Resource groups contain resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the five different Azure compute services?

A

VACAA
Virtual machines
App Services
Container instances
Azure Kubernetes Services
Azure Virtual Desktop

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Describe VM options- Azure Virtual Machines

A

Software emulations of physical computers. An IaaS offering. Includes: virtual processor, memory, storage, networking.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Describe resources required for virtual machines

A

Virtual machines required processing power, memory, and storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Describe the Web Apps feature of Azure App Service

A

Web Apps-App Service includes full support for hosting web apps by using ASP.NET, ASP.NET Core, Java, Ruby, Node.js, PHP, or Python. You can choose either Windows or Linux as the host operating system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Describe Azure virtual subnets

A

A subnet is a range of IP addresses in the virtual network. You can divide a virtual network into multiple subnets for organization and security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Define public and private endpoints

A

Public endpoints have a public IP address and can be accessed from anywhere in the world.

Private endpoints exist within a virtual network and have a private IP address from within the address space of that virtual network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Compare Azure storage services

A

CDA

Container services (blob, PaaS) - Unstructured data: photos, audio files, pdfs, etc. Used for hosting images for public website

Disk storage: IaaS. Fast and easy to use. Only tied to one virtual machine

Azure Files: Similar to file share in on premises environment. Allows sharing of files over a network. Only those who have access to encryption key can access. SMB protocol will only be associated with Azure Files

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Describe storage tiers

A

HCA

Hot - For storing data that is accessed frequently (most expensive)
Cool - For storing data that is used infrequently and accessed and stored for at least 30 days
Archive - optimized for data that is rarely accessed and is stored for at least 180 days (least expensive)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Describe storage redundancy options

A

LRS - locally redundant storage - single datacenter in primary region
ZRS - zone redundant storage - Three availability zones in primary region
GRS - geo redundant storage - single datacenter in primary and secondary region
GZRS - geo redundant storage - three availability zones in primary region and single data center in secondary region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the storage account types?

A

SPPP

Standard general-purpose v2
Premium block blobs3
Premium file shares3
Premium page blobs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Identify options for moving files: AzCopy

A

Command line utility. Can copy blobs or files from your storage account. One direction synchonization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Describe migration options, including Azure Migrate and Azure Data Box

A

Azure Migrate: A single portal to start, run, and track your migration to Azure.

Azure Data Box: A physical data storage box. Allows to send data into azure in a fast, safe, reliable way. Can import/export data into azure. Order through azure portal.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Describe directory services in Azure: Azure Active Directory (Azure AD)

A

Cloud-based identity and mobile device management that provides user account and authentication services for resources such as Microsoft 365, the Azure portal, or SaaS applications.

22
Q

Describe authentication methods in Azure, including single sign-on (SSO), multifactor
authentication, and passwordless

A

SSO: Authentication method. Enables users to securely authenticate multiple applications/websites. Uses user name/pass. Allows admins to use single set of credentials

Multifactor authentication: Requres two or more elements for full authentication: Something you know (ie a password) something you possesses ( ie a cell phone or device) or something you are (ie facial recognition, like Windows Hello),

Passwordless: You can also allow your employee’s phone to become a passwordless authentication method. You may already be using the Authenticator app as a convenient multi-factor authentication option in addition to a password. You can also use the Authenticator App as a passwordless option.

23
Q

Describe external identities and guest access in Azure

A

External B2B (business to business): Identity and access management for partners, vendors, suppliers, and other collaborators.

External B2C (Business to customer): Identity and access management for your customer-facing apps

24
Q

Describe Azure AD Conditional Access

A

Used to bring signals together to make decisions and enforce organizational policies. Signals can include:

The user and user location
Device being used
Any Real Time Risks
The application being used.

If- then statement. Example: If Denis is in Asia, then require multifactor authentication.

25
Q

Describe Azure role-based access control (RBAC)

A

Segregate duties within the team and grant only the amount of access to users that they need to perform their jobs.

26
Q

Describe the concept of Zero Trust

A

Zero trust: A security model where you assume the worst and assume that a bad actor has access to all assets within a network, and protect all assets.

27
Q

Describe the purpose of the defense in depth model

A

A layered approach to security. Each layer has a level of protection, from the physical security (outermost layer), to the data (center)

28
Q

Describe the purpose of Microsoft Defender for Cloud

A

Provides threat protection for both Azure and on-premises datacenters.

Provides security recomendations
Detect and block malware
Analyze and identify potential attacks
Just-in-time access control for ports.

29
Q

Describe subscription billing boundaries

A

Generate separate billing reports and invoices for each subscription.

30
Q

Describe subscription access control boundaries

A

Manage and control access to the resources that users can use with specific subscriptions.

31
Q

Describe VM options- Azure Virtual Machine Scale Sets

A

Load balanced. Can scale out when resource needs increase and scale in when resource needs are lower.

32
Q

Describe VM options - availability sets

A

A logical group of VMs to provide redundancy and availability. Only charged for VMs that are deployed.

Availability sets contain Fault domains and updated domains which reside in the same datacenter..

33
Q

Describe VM options - Azure Virtual Desktop

A
34
Q

Describe Availability Set Update Domains

A

Group of VMs. Two VMs in an update domain cannot be updated at the same time.

35
Q

Describe availability set fault domains

A

a group of VMs that share a power source and network switch. Can configure up to 3 fault domains at once. Like a server in a data center.

36
Q

Describe Azure Virtual Desktop

A

Azure Virtual Desktop is a cloud-hosted version of Windows that can be accessed from any location. Azure Virtual Desktop works across devices and operating systems, and works with apps that you can use to access remote desktops or most modern browsers.

37
Q

Describe Azure containers

A

Light weight virtualized environment that does not require OS management, and can respond to changes on demand

38
Q

Describe Azure Container Instances

A

PaaS offering that runs a container in Azure without the need to manage a virtual machine or additional services.

39
Q

Describe Azure Kubernetes Service

A

Orchestration service for containers with distributed architectures and large volumes of containers

40
Q

Describe Azure App Services

A

A PaaS offering. Fully managed platform to build, deploy, and scale web apps and APIs quickly. Works with .NET, .NET Core, Node.js, Java, Python or php

41
Q

Describe virtual network peering

A

You can link virtual networks together by using virtual network peering. Peering allows two virtual networks to connect directly to each other.

42
Q

Describe the supported storage services for the account type: Standard general-purpose v2

A

Blob Storage (including Data Lake Storage1), Queue Storage, Table Storage, and Azure Files

43
Q

Describe the supported storage services for the account type: Premium block blobs3

A

Blob Storage (including Data Lake Storage1)

44
Q

Describe the supported storage services for the account type: Premium file shares3

A

Azure Files

45
Q

Describe the supported storage services for the account type: Premium page blobs3

A

Page blobs only

46
Q

Identify options for moving files: Azure Storage Explorer

A

Graphical User Interface (like Windows File Explorer)
Compatible with Windows, Mac, and Linux
Uses AzCopy to handle file operations

47
Q

Identify options for moving files: Azure File Sync

A

Works with on premises files to keep files in sync with azure cloud in a bi directional manner
Keeps frequently accessed files local, while freeing up space

48
Q

Describe directory services in Azure: Azure Active Directory Domain Services (Azure AD DS)

A

Provides features:
Domain join,
Group policy,
LDAP,
Kerberos / NTLM authentication.

49
Q

True or False: Resources can only exist in one resource group

A

True

50
Q

True or False: Resources cannot exist in different regions

A

False. Resources can exist in different regions.

51
Q

True or False: Resources can be moved to different resource groups

A

True

52
Q

True or False: Applications cannot utilize multiple resource groups

A

False. Applications can utilize multiple resource groups

AZ900 (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions