Describe the core architectural components of Azure Flashcards
It is a geographical area on the planet that contains at least one but potentially multiple datacenters that are nearby and networked together with a low-latency network.
Azure region
True or false.
When deploying a resource in Azure, you’ll often need to choose the region where you want your resource deployed.
TRUE
Name a few examples of Azure regions
West US Canada Central West Europe Australia East Japan West.
What are some special Azure regions in the US?
US DoD Central
US Gov Virginia
US Gov Iowa
These regions are available through a unique partnership between Microsoft and 21Vianet, whereby Microsoft doesn’t directly maintain the datacenters.
China East
China North
Define special Azure regions
These are regions that you might want to use when you build out your applications for compliance or legal purposes.
What is an availability zone?
Availability zones are physically separate datacenters within an Azure region.
How are availability zones connected?
Through high-speed, private fiber-optic networks.
Why is it said that an availability zone is set up to be an isolation boundary?
If one zone goes down, the other continues working.
True or False
Every region has support for availability zones.
FALSE
Is it cheaper to use availability zones?
NO
There could be a cost to duplicating your services and transferring data between zones.
What are availability zones mainly used for?
VMs
Managed disks
Load balancers
SQL databases.
…is a unique physical building that contains thousands of physical servers with it’s own power, cooling and networking infrastructure.
Azure data center
These Azure services don’t require you to select a particular region.
Azure Active Directory
Azure Traffic Manager
Azure DNS
Why are regions important?
Global regions provide better scalability and redundancy.
They preserve data residency for your services
Azure regions
TRUE / FALSE
There must be a minimum of 3 availability zones within a single region
TRUE
What is a region pair?
Each Azure region is always paired with another region within the same geography (such as US, Europe, or Asia) at least 300 miles away.
Interruptions because of events such as natural disasters, civil unrest, power outages, or physical network outages can be reduced by:
Azure region pairing
TRUE / FALSE
Regarding region pairs:
Data continues to reside within the same geography as its pair (except for Brazil South) for tax- and law-enforcement jurisdiction purposes.
TRUE
What is the main advantage of having a broadly distributed set of datacenters?
High guarantee of availability!
A manageable item that’s available through Azure. Virtual machines (VMs), storage accounts, web apps, databases, and virtual networks are examples of it.
Resource
A container that holds related resources for an Azure solution.
Resource group.
It is a logical container for resources deployed on Azure.
Resource group
TRUE / FALSE
All resources must be in a resource group.
TRUE
TRUE / FALSE
A resource can only be a member of a single resource group.
TRUE
TRUE / FALSE
Resource groups can be nested
FALSE
TRUE / FALSE
Resources can be moved between resource groups.
TRUE
Before any resource can be provisioned, you need a “ “ for it to be placed in.
resource group
…exist to help manage and organize your Azure resources.
Resource groups
TRUE / FALSE
If you delete a resource group, all resources contained within it are also deleted.
TRUE
Organizing resources by life cycle can be useful in…
nonproduction environments
Wat is RBAC?
Role-based access control
By applying “ “ permissions to a resource group, you can ease administration and limit access to allow only what’s needed
RBAC
What is Azure Resource Manager?
It is the deployment and management service for Azure.
It provides a management layer that enables you to create, update, and delete resources in your Azure account.
Azure Resource Manager
What are some ARM management features to secure and organize your resources after deployment.
Access control
Locks
Tags
TRUE / FALSE
All requests between ARM and Azure services are handled through the same API.
TRUE
All capabilities that are available in the Azure portal are also available through:
Azure PowerShell
Azure CLI
REST APIs
Client SDKs
What type of file is a Resource Manager template?
JSON
TRUE / FALSE
With ARM, you can manage your infrastructure through declarative templates rather than scripts
TRUE
What is a benefit of using ARM?
Deploy, manage, and monitor all the resources for your solution as a group, rather than handling these resources individually.
With “ “ you can apply tags to resources to logically organize all the resources in your subscription.
ARM
TRUE / FALSE
With ARM you can view costs for a group of resources that share the same tag
TRUE
What is the most basic thing you need to be able to use Azure?
An Azure subscription
It is a logical unit of Azure services that links to an Azure account
Azure subscription
Can an Azure account have multiple subcriptions?
Yes, and these subscriptions can have different billing models and different access-management policies.
Which are the two types of boundaries that you can use around Azure products, services and resources?
Billing boundary
Access control boundary
TRUE / FALSE
Azure generates separate billing reports and invoices for each subscription so that you can organize and manage costs.
TRUE
What is a billing boundary?
This subscription type determines how an Azure account is billed for using Azure.
TRUE / FALSE
you can create separate subscriptions to reflect different organizational structures.
TRUE
What is an access control boundary?
Azure applies access-management policies at the subscription level.
This billing model allows you to manage and control access to the resources that users provision with specific subscriptions.
Access control boundary
You can create additional subscriptions to separate:
Environments
Organizational structures
Billing
I want 15 Azure ExpressRoute circuits, what do i need to do?
Create two Azure subscriptions since you can only have 10 circuits per sub.
TRUE / FALSE
You can set up multiple invoices within the same billing account.
TRUE
You need to create additional billing profiles
It is the highest in the billing hierarchy
Billing account
TRUE / FALSE
A billing account can have multiple billing profiles
TRUE
…provide a level of scope above subscriptions.
Azure management groups
TRUE / FALSE
All subscriptions within a management group automatically inherit the conditions applied to the management group.
TRUE
TRUE / FALSE
An Azure management group can have multiple management groups
TRUE
TRUE / FALSE
An Azure management group can have multiple subscriptions
TRUE
You can use a “ “ to provide user access to multiple subscriptions.
Management group
What happens if you create a RBAC assignment on a management group?
That access will be inherited to all the subscriptions below that management group.
TRUE / FALSE
10,000 management groups can be supported in a single directory.
TRUE
TRUE / FALSE
A management group tree can support up to five levels of depth. This limit doesn’t include the root level or the subscription level.
FALSE
It can support up to six levels.
TRUE / FALSE
Each management group and subscription can support only one parent.
TRUE
TRUE / FALSE
All subscriptions and management groups are within a single hierarchy in each directory.
TRUE