Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Azure Fundamentals (May 5, 2022) > Describe Azure architecture and services > Flashcards

Describe Azure architecture and services Flashcards

1
Q

Describe Azure region

A

A region is a geographical area on the planet that contains at least one but potentially multiple datacenters that are nearby and connected with a low-latency network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Describe availability zones

A

Availability zones are made up of at least 3 physically separate data centers within an Azure region. Each data center has its own cooling, power, and networking. They’re connected to each other through high-speed, private fiber-optic networks, if one in the zone goes down the others continue working.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Describe Azure data centers

A

Azure data centers are buildings around the world that contain all the hardware that Azure runs on.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Describe Azure resources

A

Resources are instances of services you create, such as VMs or SQL databases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Describe subscriptions

A

A subscription bundles together resources and the user account that created them. Each subscription has a limit to the number of resources that can be created and used, which is set by management groups. Subscriptions are used to manage costs and, at a higher level, resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Describe management groups

A

Management groups help you manage access, policy, and compliance for multiple subscriptions. All subscriptions in a management group automatically inherit the conditions applied to the management group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Describe the hierarchy of resource groups, subscriptions, and management groups

A

Resources, or instances of services, at the lowest level
Resource groups are logical containers for resources
Subscriptions group together resource groups and the user account created them
Management groups are containers for subscriptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Describe the Container Instances compute service

A

Container Instances abstract away the operating system and infrastructure requirements for a single application and its dependencies. Azure allows you to run a container without having to manage any VMs or additional services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Describe Azure Virtual Machines

A

Virtual Machines are software emulations of physical computers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Describe resources required for virtual machines

A

Managed Disk Drive
Azure Subscription
Azure Resource Group
Virtual Network Interface
Network Security Group
Public IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Describe the Azure App Service hosting option

A

App Service allows you to host an application without having to handle the infrastructure or operating system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Describe the purpose of Azure Virtual Networks

A

Azure Virtual Networks enable Azure resources to communicate with each other, users on the Internet, and your on-premises client computers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Define public endpoints

A

Public endpoints have a public IP address and can be accessed from anywhere in the world.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Compare Azure storage services

A

Azure Blobs: A massively scalable object store for text and binary data in block blobs.
Azure Files: Managed file shares you can mount for cloud or on-premises deployments.
Azure Queues: An asynchronous messaging queue for reliable messaging between application components.
Azure Tables: A structured key/attribute NoSQL store with a schemaless design.
Azure Disks: Virtual hard disks for Azure VMs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Describe the Hot Access storage tier

A

The hot access tier is optimized for storing data that are accessed frequently.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Describe the Locally redundant storage (LRS) redundancy option

A

Your data is has 3 synchronous copies within the same data center

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Describe the Standard general-purpose storage account type

A

A standard storage account type for blobs, file shares, queues, and tables. Recommended for most scenarios using Azure Storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Describe moving files with AzCopy

A

AzCopy is a command-line utility that you can use to copy blobs or files to or from a storage account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Describe data migration with Azure Migrate

A

Azure Migrate provides a way to move your on-premises data center to Azure using services for migration, modernization, and optimization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Describe Azure Active Directory (Azure AD)

A

Azure Active Directory (Azure AD) is a globally available identity service that enables your users to sign in and access both cloud and on-premises applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Describe single sign-on (SSO) authentication

A

Single sign-on (SSO) authentication gives the ability to manage multiple on-premises infrastructure components and systems by using a single identity per user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Describe external identities and guest access in Azure

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Describe Azure AD Conditional Access

A

Conditional Access is an additional layer of authorization with identity-driven signals as part of their access control decisions. Policies at their simplest are if-then statements, if a user wants to access a resource, then they must complete an action.

24
Q

Describe Azure role-based access control (RBAC)

A

Azure role-based access control (Azure RBAC) is an authorization system built on Azure Resource Manager that helps you manage who has access to Azure resources, what they can do with those resources, and what areas they have access to.

25
Q

Describe the concept of Zero Trust

A

Zero Trust is a security strategy that assumes breach and verifies each request as though it originated from an uncontrolled network. It’s an approach to designing and implementing the following set of security principles:
Verify explicitly
Use least privilege access
Assume breach

26
Q

Describe the purpose of the defense in depth model

A

Defense-in-depth is a strategy that leverages multiple security measures to protect an organization’s assets, so if one line of defense is compromised, additional layers exist as a backup to ensure that threats are stopped along the way.

27
Q

Describe the purpose of Microsoft Defender for Cloud

A

Microsoft Defender for Cloud is a security manager that can assess the current level of security in your environment, ensure regulatory standards are enforced and recommend actions to close gaps in security.

28
Q

Describe regional pairs

A

A region pair is two Azure regions that act as failovers for each other and are within the same region and are at least 300 miles away from each other to reduce the likelihood of interruptions. If one in the pair is affected by an outage of any kind/for any reason, services would automatically failover to the other region in its pair.

29
Q

Describe sovereign regions

A

Sovereign regions are regions dedicated to specific sovereign entities and are isolated from the rest of Azure

30
Q

Describe resource groups

A

Resource groups are logical containers for resources, in which they are deployed and managed.

31
Q

Describe Azure Virtual Machine Scales sets

A

Azure Virtual Machine Scale sets let you create and manage groups of identical load-balancing virtual machines which automatically scale up or down based on demands

32
Q

Describe availability sets

A

Availability sets are logical groupings of virtual machines that allow Azure to understand how your application is built to provide redundancy and availability

33
Q

Describe Azure Virtual Desktop

A

Azure Virtual Desktop is a desktop and application virtualization service that enables users to use a cloud-hosted version of Windows from any location

34
Q

Describe the Azure Containers hosting option

A

Containers allow you to run virtualized environments that can be created, scaled out, and stopped dynamically; allowing for faster changes on demand compared to virtual machines

35
Q

Describe the Virtual Machine hosting option

A

Virtual Machines would allow you to have total control over the operating system, run custom software, and use custom hosting configurations

36
Q

Describe the Azure Virtual Machine compute service

A

Virtual Machines abstract away the hardware needed to run an operating system, virtualizing a customizable server

37
Q

Describe the Azure Functions compute service

A

Azure Functions is a service that uses serverless computing, or the abstraction of servers, infrastructure, and operating systems

38
Q

Describe the purpose of Azure virtual subnets

A

Azure virtual subnets are partitions within a virtual network’s address space. Routing between subnets is based on default or custom traffic routes.

39
Q

Describe the purpose of peering

A

Peering enables you to connect two or more virtual networks together via Microsoft’s private network

40
Q

Describe the purpose of Azure DNS

A

Azure DNS is a hosting service for DNS domains that provides name resolution by using Microsoft Azure infrastructure.

41
Q

Describe the purpose of Azure VPN Gateway

A

Azure VPN Gateway uses an encrypted tunnel to connect two private endpoints within a dedicated subnet over an untrusted network (typically the public internet) to prevent eavesdropping or other attacks.

42
Q

Describe the purpose of Azure ExpressRoute

A

Azure ExpressRoute lets you connect two endpoints over a private connection with the help of a connectivity provider.

43
Q

Define private endpoints

A

Private endpoints exist within a virtual network and have a private IP address from within the virtual network’s address space.

44
Q

Describe the Cool Access storage tier

A

Cool access tier is for data that’s infrequently accessed and stored for at least 30 days.

45
Q

Describe the Archive Access storage tier

A

The archive access tier is for data that are rarely accessed and stored for at least 180 days.

46
Q

Describe the Zone-redundant storage (ZRS) redundancy option

A

Your data is replicated in 3 availability zones within the same region

47
Q

Describe the Geographically-redundant storage (GRS) redundancy option

A

Same as LRS, plus 3 asynchronous copies in a second data center at least 300 hundreds of miles away

48
Q

Describe the Geographically-zone-redundant storage (GZRS) redundancy option

A

Same as ZRS, plus a second set of 3 availability zones to a second region hundreds of miles away

49
Q

Describe the Premium block blob storage type

A

A premium storage account type for block blobs and append blobs. Recommended for scenarios with high transaction rates, that use smaller objects, or require consistently low storage latency.

50
Q

Describe the Premium file shares storage type

A

A premium storage account type for file shares only. Recommended for enterprise or high-performance scale applications.

51
Q

Describe the Premium page blobs storage type

A

A premium storage account type for page blobs only.

52
Q

Describe moving files with Azure Storage Explorer

A

Azure Storage Explorer is a standalone file explorer application that makes it easy to work with Azure Storage data on Windows, macOS, and Linux.

53
Q

Describe moving files with Azure File Sync

A

Azure File Sync enables centralizing your organization’s file shares in Azure Files, and has the ability to transform Windows Server into a quick cache of your Azure file share.

54
Q

Describe data migration with Azure Data Box

A

The Microsoft Azure Data Box cloud solution lets you send up to 80 terabytes of data into and out of Azure in a quick, inexpensive, and reliable way using a proprietary Data Box storage device that’s transported to your data center through a regional carrier.

55
Q

Describe Azure Active Directory Domain Services (Azure AD DS)

A

Azure Active Directory Domain Services (Azure AD DS) lets users sign in to services and applications connected to the managed domain using their existing Azure AD credentials.

56
Q

Describe multi-factor authentication

A

Multi-factor authentication adds additional security to just a password, such as responding to a push notification, entering a code from a software or hardware token, or responding to an text message or phone call.

57
Q

Describe passwordless authentication

A

Passwordless authentication replaces a password with something you have (a Windows device, phone, or security key), plus something you are (biometrics) or something you know (a PIN).

Azure Fundamentals (May 5, 2022) (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions