Section 3 Flashcards
Is a combination of software, data access, computation, and storage services provided to clients through the internet. It is used to describe the internet infrastructure in computer network diagrams.
Cloud computing
Anyone can access. Cloud-based computing resources (such as platforms, applications, and storage) are made available to the public by a cloud service provider. The service provider may require a fee for using these resources.
Public cloud
Provides resources to a single organization. Access is granted only to users within the organization. Are typically hosted internally, but an organization may use third-party hosting because of the necessary expense and expertise.
Private cloud
Is a combination of public and private clouds that are leveraged for certain kinds of apps.
Hybrid cloud
Delivers infrastructure to the client, such as processing, storage, networks, and virtualized environments. The customer rents the infrastructure components that they need.
Infrastructure as a Service (IaaS)
With IaaS, the provider is responsible for managing the following aspects of the infrastructure:
Computing power
Storage
Networking
With IaaS, the customer is responsible for managing:
Operating systems
Applications
Data
Access
Examples of IaaS
Azure virtual machines and Azure storage.
The deployment comes without the cost and complexity of buying and managing the underlying hardware and software layers. Is often used for development, analytics, and business intelligence.
Platform as a Service (PaaS)
With Paas, the provider is responsible for managing the following aspects of the platform:
Operating Systems
Computing power
Storage
Networking
With PaaS, the customer is responsible for managing:
Data
Access
Applications
Examples of PaaS
Azure App Services and Azure SQL
Delivers software applications to the client over the internet or on a local area network. It is by far the most used model.
Software as a Service (SaaS)
With software as a service, the provider is responsible for managing the following aspects of the software applications:
Operating system
Networking
Storage
Computing power
Applications
Examples of SaaS
Microsoft Outlook, Calendar, Teams, OneDrive, and Office 365
Is a term used to define physical objects that communicate with other systems over a public or private network.
Internet of Thins (IoT)
Azure services are managed through this, a dashboard with a graphical user interface.
Azure Portal
Is a management service that provides a location to manage all resources in your Azure account.
Azure Resource Manager (ARM)
provides a one-stop shop for organizations to purchase third-party software and services designed and certified to run on Azure.
Azure Marketplace
Include one or more data centers within the same region that are located in different geographical locations.
Availability zones
Resource groups are logical containers for resources.
Resources
Combines user accounts with the resources each user has created.
Subscriptions
Used to administer multiple subscriptions, policies, compliance, and access.
Management groups
Data centers that are organized into geographical areas. Each one comprises of one or more data centers.
Regions
Benefits of regions:
Resources can be closer to the user
Load balancing
Scalability
Redundancy
Resiliency
Designed specifically to address governmental legal and compliance concerns. These regions may be specific to your state or country.
Azure’s special regions
Include one or more data centers within the same region in different geographical locations. The centers are connected using private fiber-optic networks. Each center can operate on its own if needed so that if one location stops working, the other will continue operations.
Availability zones
Established to provide even further redundancy. If a natural disaster or other event were to impact two or more data centers in the same region, all services would fail over to the region’s pair.
Region pairs
Items that can be managed using Azure. This could include:
Virtual machines
SQL databases
Storage
Web apps
Resources
Contain one or more resources to be managed and could include:
Virtual machines
SQL databases
Storage
Web apps
Management groups
Using Azure Resource Manager, you can:
Create resources
Update resources
Delete resources
Secure resources
Increase stability and reduce hardware costs. Windows Server, Windows Client, or Linux ones can be created on demand.
Virtual Machines
Azure Virtual Machines can be used for:
Times when you need full control over a machine.
Running custom software.
Testing and development.
Increasing the size of a data center.
Applications with fluctuating demands.
Web apps, configurations, and files are packaged together so they can be consistently shared and deployed over the cloud.
Azure Container Instances
Azure Container Instances can be used when:
You need to run multiple isolated container instances on one computer.
You do not need to have full control over the VM.
You want to develop without worrying about managing a full virtual machine.
You need to split your app into logical parts for maintenance and scalability.
An application and desktop virtualization that can be run anywhere in the world using any operating system and any modern browser.
Azure Virtual Desktop
Azure Virtual Desktop can be used when:
You do not want to risk personal data stored on a laptop or other physical device.
Your end-users are using different operating systems.
Your users are scattered across different locations and need anywhere-access.
You need to accommodate users using various operating systems.
An orchestration service that can be used to manage numerous container instances (nodes).
Azure Kubernetes Service (AKS)
Can be used when you need to manage a large number of container instances.
Azure Kubernetes Service
Provide a method for Azure VMs, databases, and apps to communicate.
Azure virtual networks
The following methods can be used to extend your virtual network:
Azure ExpressRoute
Point-to-site private networks
Site-to-site private networks
Azure virtual networks can be used for:
Segmentation (subnets)
Isolation
Network traffic filtering
Communication between local and Azure resources
Provides a secure connection between an Azure virtual network and another network.
Azure VPN Gateway
VPN Gateways can be used to establish the following connections:
Network-to-network connection
Site-to-site connection
Point-to-site connection
A private connection between your on-premises network and Microsoft cloud services such as Azure.
Azure ExpressRoute
Unlike a VPN that is limited to around 1.25 Gbps network speed, Azure ExpressRoute can provide up to how many Gbps?
10
Useful when you need faster speeds, lower latency, and increased reliability over regular internet connectivity.
Azure ExpressRoute
Provides a low-latency option for connecting one virtual network to another. Traffic between the two networks is done on Microsoft’s private infrastructure instead of over the Internet.
Virtual network peering
Is useful for database failover and data replication.
Virtual network peering
Houses large amounts of unstructured data such as images, audio, video, and text.
Blob storage
Items stored in blob storage are called?
Blobs
Are organized into containers. This data is connected to user accounts and can be accessed from anywhere.
Blobs
Blob storage is often used for:
Files that need distributed access
Streaming video
Backup and disaster recovery data
Browser images or documents
Used with Azure Virtual Machines. Azure provides hard disks, solid-state drives, and ultra disks.
Azure-managed disks