Describe Azure Architecture & Services Flashcards

1
Q

Region Definition

A

Multiple availability zones in close proximity geographically with low latency between them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Region Pairs

(def & 3 advantages)

A

region pairing within the same geography: replication of resources and fault tolerance redundancy

  • outage backup
  • minimizing downtime during updates
  • same geography (tax & regulatory concerns)
  • lowest latency between regions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Soverign Region

A

Exclusive public region region not available to everyone

ex. China, US gov, DoD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Availability Zones

A

physically seperate data centers within a region, designed for hardware fault tolerance

(independant power, cooling, networking)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Resource Group

(def & 3 rules)

A
  • container to manage the reasources needed for an application to run
  • rules:
    1. resource can only be aligned to one group
    2. can be moved across different regions
    3. application can have more than one resource group
  • example resources:
    • metering & billing
    • policies
    • monitoring & alerts
    • quotas
    • access control
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Subscription

A
  • whom the resources and resource group is billed to
  • how you manage resource groups for billing
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Management Groups

A
  • organization of subscriptions
  • set governance (access, policies, and compliance) and this level
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Computing Services (6)

A
  1. Virtual Machine
  2. VM Scale Sets
  3. App Services (web app)
  4. Container Instances
  5. Kubernetes Services
  6. Windows Virtual Desktops
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Virtual Machine Definition

A

Virtual Machine: emulation of a computer, running on a server in one or more datacenters.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

VM Scale Sets Definition

availability set note as well

A
  • 2+ virtual machines running exact same code
  • autoscaling
  • load balancer: manages traffic

availability set: stagger updates, varied network and power to prevent single point of failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

App Services Definition

A
  • code without access to the hardware or compute (OS)
  • application hosting
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Azure Containers

2 types

A
  1. Container Instances: single instance
  2. Kubernetes: cluster of containers, needs a cluster of machines

for development, testing apps (PaaS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Windows Virtual Desktop

A
  • MS 365: windows in the cloud
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Azure Functions

A

event driven, serverless computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Azure Networking Services

(4)

A
  1. Virtual Networks
  2. VPN Gateway
  3. VNet Peering
  4. ExpressRoute
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Virtual Private Network

A
  1. connect two networks as-if its the same network (home to office network)
  2. network gateway
17
Q

ExpressRoute

A

connect your private network to azure (no data over public internet)

18
Q

Subnet

A

subdivision of a virutal network with its own security rules

19
Q

Azure DNS

A

Azure Domain System Name is hosting service for websites

20
Q

Azure Storage Options

4 types

A
  1. Blob
  2. Disk
  3. File
  4. Queues
21
Q

Blob Storage Types

2

A
  1. General Purpose: hanlde all types of data
  2. Data Lake Gen2 (block blob): data analytics
22
Q

Blob Storage Tiers

3 types - 2 rules

A
  1. hot: frequent access
  2. cold: infequenty, but last at least 30 days
  3. archive: rarely accessed sotred for at least 180 days

rules:
1. only hot and cold can be set at account level
2. archive is set at the blob level

23
Q

File Storage Definition

A

think share drive

24
Q

Queue Storage

A

storage a large number of messages

25
Q

Redundancy Options

5 types

A
  1. Local
  2. Geo
  3. Zone
  4. Geo-Zone
  5. Read Access Geo/Geo Zone
26
Q

Local & Geo Redundancy

A

local: single datacenter (availability zone)

geo: single data center multiple regions

27
Q

Zone and Geo-Zone Redundancy

A

zone: multiple datacenters (availability zones) within region

geo-zone: zone storage + single datacenter in 2nd region

28
Q

read-access redundancies

(2 types)

A

read-access geo: read-access in 2nd region

read-access geo-zone: read-access version of geo-zone

29
Q

standard vs. premium redendancy

A

standard: get all 4 types of storage redundancy

premium: only get local and zone, becuase premium is designed for low latency (data lake gen2, page, file,

30
Q

Azure Migrate Tools

6 types

A
  1. discovery & assement: assess on prem
  2. server migration: VM migration
  3. migration assistane: used for SQL server
  4. database servies: on-prem databases (more general)
  5. web app assistant: website migration
  6. data box: large data migration, pyhsical devices (max 80 terabytes)
31
Q

AzCopy Definition

A

command line utility to copy files from storage account

32
Q

File Sync Definition

A

bi-directional syncing of local server data to Azure

33
Q

definition of identity within Azure

what 3 things can identity refer to

A
  1. person
  2. applications
  3. devices
34
Q

Azure Active Directory (AAD) Model

what are the authentication steps

A
  1. credentials to aad (identity provider in the visual)
  2. signed token back to user
  3. signed token then goes to server
  4. aad sends a tust, key to server for verification
35
Q

Azure Activite Directory Domain Services
(AAD DS)

A

stores centralized directory information and lets users and domains communicate

36
Q

Azure External Identities

A
  • allows you to securely interact with users outside of your organizations
  • examples: consumer facing apps, corporate identity on social media
37
Q

Azure Conditional Access

defintion and conditions

A

only allow access to resources based on conditions (signals)
1. user location
2. device being used
3. who is the user

38
Q

Zero Trust Model

what does it require - 3 principles

A

requires authentication to each resource or from any device

three principals:
1. verify explicitly
2. least privilege access
3. assume breach