Describe Azure architecture and services Flashcards

1
Q

After making an Azure account, what do you need in order to start creating Azure resources?

A

An Azure subscription

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What command can you enter when in Azure CLI to change to Azure powershell?

A

pwsh

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a region?

A

a geographical area on the planet that contains at least one, but potentially multiple datacenters that are nearby and networked together with a low-latency network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What type of resource are availability zones primarily for? (4)

A
  1. VMs
  2. managed disks
  3. load balancers
  4. SQL databases
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are availability zones?

A

physically separate datacenters within an Azure region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What three categories do resources that support availability zone fall into?

A

Zonal services: You pin the resource to a specific zone (for example, VMs, managed disks, IP addresses).
Zone-redundant services: The platform replicates automatically across zones (for example, zone-redundant storage, SQL Database).
Non-regional services: Services are always available from Azure geographies and are resilient to zone-wide outages as well as region-wide outages.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a region pair?

A

a pairing with another region within the same geography (such as US, Europe, or Asia) at least 300 miles away to allows= for the replication of resources across a geography that helps reduce the likelihood of interruptions because of events such as natural disasters, civil unrest, power outages, or physical network outages that affect an entire region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are Sovereign Regions?

A

Instances of Azure that are isolated from the main instance of Azure (maybe for compliance or legal purposes)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are you required to do when creating a resource?

A

Assign it to a resource grou

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Azure subscriptions are…

A

a unit of management, billing, and scale

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How many Azure subscriptions can an account have?

A

Multiple, but it only requires one

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the two types of subscription boundaries?

A

Billing and access control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How does a subscription billing boundary work?

A

Azure generates separate billing reports and invoices for each subscription so that you can organise and manage costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How does a subscription access control boundary boundary work?

A

Azure applies access-management policies at the subscription level, and you can create separate subscriptions to reflect different organisational structures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How are availability zones connected?

A

through high-speed, private fiber-optic networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the minimum number of availability zones present in all availability zone-enabled regions?

A

Three

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Do all Azure regions contain availability zones?

A

No, regions that do not still can contain multiple data centers however they are not connected via their own independent network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What do virtual machines provide?

A

provide infrastructure as a service (IaaS) in the form of a virtualised server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is an image?

A

a template used to create a VM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is a VM scale set?

A

a group of identical, load-balanced VMs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does the update domain VM grouping determine?

A

VMs that can be rebooted at the same time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

How does fault domain VM grouping work?

A

it groups your VMs by common power source and network switch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

In what two ways do availability sets group VMs

A

update domain and fault domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What type of resources can you pick when creating a VM? (3)

A
  1. Size
  2. Storage
  3. Networking
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

what command is used in Azure CLI to create a virtual machine?

A

az vm create

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What does Azure Virtual Desktop allow?

A

It enables you to use a cloud-hosted version of Windows from any location

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

How does Azure virtual desktop provide centralised security?

A

With Microsoft Entra ID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are containers?

A

A virtualisation environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is the difference between containerisation and virtualisation?

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What is a benefit of Azure functions?

A

enables you to build and host web apps, background jobs, mobile back-ends, and RESTful APIs in the programming language of your choice without managing infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

When are Azure functions commonly used?

A

when you need to perform work in response to an event (often via a REST request), timer, or message from another Azure service, and when that work can be completed quickly, within seconds or less.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

How are you charged with Azure functions?

A

Azure only charges you for the CPU time used while your function runs

33
Q

What are the two types of Azure function?

A

Stateless and stateful (durable functions)

34
Q

How do stateful Azure functions work?

A

a context is passed through the function to track prior activity

35
Q

What is Azure App Service?

A
36
Q

What are the types of app service offered by Azure App Service? (4)

A
  1. Web app
  2. API apps
  3. WebJobs
  4. Mobile apps
37
Q

What is the purpose of Azure Virtual Networks?

A

they enable Azure resources, such as VMs, web apps, and databases, to communicate with each other, with users on the internet, and with your on-premises client computers

38
Q

What is the purpose of Azure VPNs?

A

to connect two or more trusted private networks to one another over an untrusted network (typically the public internet)

39
Q

A point-to-site private virtual connection provides a connection between what?

A

a computer outside your organization back into your corporate network

40
Q

A site-to-site private virtual connection provides a connection between what?

A

your on-premises VPN device or gateway to the Azure VPN gateway in a virtual network

41
Q

A network-to-network private virtual connection provides a connection between what?

A

two virtual networks

42
Q

What is the Azure VPN gateway?

A

a type of virtual network gateway which instances are deployed in a dedicated subnet of the virtual network

43
Q

What must you specify when setting up a VPN gateway?

A

Whether it is policy-based or route-based

44
Q

You should use a route-based VPN when you require which types of connectivity? (4)

A
  1. Connections between virtual networks
  2. Point-to-site connections
  3. Multisite connections
  4. Coexistence with an Azure ExpressRoute gateway
45
Q

What can be done to maximise the resiliency of your VPN gateway?

A
  1. Active/standby configuration
  2. Active/active configuration
  3. ExpressRoute failover
  4. Zone-redundant gateways
46
Q

What is Azure DNS?

A

a hosting service for DNS domains that provides name resolution by using Microsoft Azure infrastructure

47
Q

What is the benefit of hosting your DNS in Azure?

A

you can manage your DNS records using the same credentials, APIs, tools, and billing as your other Azure services

48
Q

What is an Azure storage account?

A

a unique namespace for your Azure Storage data (e.g. blobs, files, queues & tables) that’s accessible from anywhere in the world over HTTP or HTTPS.

49
Q

What does the type of storage account you choose determine?

A

the storage services and redundancy options

50
Q

What two attributes form the endpoint for an Azure storage account?

A

the account name and the Azure Storage service endpoint

51
Q

What are the requirements for storage account names? (3)

A
  1. Must be unique
  2. Must be between 3 and 24 characters
  3. Must contain lowercase letters and numbers only
52
Q

Which considerations will help you determine which redundancy option to use in regard to a storage account? (3)

A
  1. How your data is replicated in the primary region
  2. Whether your data is replicated to a second region that is geographically distant to the primary region, to protect against regional disasters
  3. Whether your application requires read access to the replicated data in the secondary region if the primary region becomes unavailable
53
Q

What does azure storage account redundancy ensure?

A

that your storage account meets its availability and durability targets even in the face of failures.

54
Q

What types of redundancy does Azure offer in the primary region? (2)

A
  1. Locally redundant storage
  2. Zone-redundant storage
55
Q

What types of redundancy does Azure offer in the secondary region? (2)

A
  1. Geo-redundant storage
  2. Geo-zone-redundant storage
56
Q

When is zone-redundant storage recommended?

A

for restricting replication of data within a country or region to meet data governance requirements

57
Q

What storage services does azure provide? (5)

A
  1. Blobs
  2. Files
  3. Queues
  4. Disks
  5. Tables
58
Q

What are some benefits of Azure storage? (5)

A
  1. Durable and highly available
  2. Secure
  3. Scalable
  4. Accessible
  5. Managed
59
Q

What is Azure blob storage?

A

an object storage solution for the cloud.

60
Q

What is blob storage good for? (5)

A
  1. Serving images or documents directly to a browser.
  2. Storing files for distributed access.
  3. Streaming video and audio.
  4. Storing data for backup and restore, disaster recovery, and archiving.
  5. Storing data for analysis by an on-premises or Azure-hosted service.
61
Q

How can Azure data storage be accessed? (6)

A
  1. Client libraries in a variety of programming lnaguages
  2. Mature REST API
  3. Azure PowerShell
  4. Azure CLI
  5. Azure portal
  6. Azure Storage Explorer
62
Q

What are the access tiers for Azure blobs? (4)

A
  1. Hot
  2. Cool
  3. Cold
  4. Archive
63
Q

Which two protocols allow fully managed file shares in Azure?

A

Server Message Block (SMB) & Network File System (NFS)

64
Q

What is the purpose of Azure queue storage?

A

storing large numbers of messages

65
Q

How can you access queue messages?

A

via authenticated calls using HTTP or HTTPS

66
Q

What type of structure does Azure tables provide

A

NoSQL/semi-structured

67
Q

What is Azure migrate?

A

a service that helps you migrate from an on-premises environment to the cloud

68
Q

What two migration services does Azure provide?

A

Azure Migrate & Azure Data box

69
Q

Use case for Azure Data box?

A

suited to transfer data sizes larger than 40 TBs in scenarios with no to limited network connectivity.

70
Q

What tools do Azure offer for file movement?

A
  1. AzCopy
  2. Azure Storage Explorer
  3. Azure File Sync
71
Q

What is Microsoft Entra ID?

A

a directory service that enables you to sign in and access both Microsoft cloud applications and cloud applications that you develop

72
Q

Examples of services that Microsoft Entra ID provides (4)

A
  1. Authentication
  2. Single sign-on (SSO)
  3. Application management
  4. Device management
73
Q

What is Microsoft Entra Connect used for?

A

connecting Microsoft Entra ID with your on-premises AD

74
Q

What is Microsoft Entra Domain Services?

A

a service that provides managed domain services such as domain join, group policy, lightweight directory access protocol (LDAP), and Kerberos/NTLM authentication

75
Q

What authentication methods does Azure support? (4)

A
  1. standard passwords
  2. single sign-on
  3. multi-factor
  4. passwordless
76
Q

Who is Windows Hello for Business useful for?

A

for information workers that have their own designated Windows PC

77
Q

What is Azure conditional access?

A

a tool that Microsoft Entra ID uses to allow (or deny) access to resources based on identity signals.

78
Q

What is the zero trust model?

A

a security model that assumes the worst case scenario and protects resources with that expectation

79
Q

What is Defender for Cloud?

A

a monitoring tool for security posture management and threat protection