Section 3 Flashcards

1
Q

Is a combination of software, data access, computation, and storage services provided to clients through the internet. It is used to describe the internet infrastructure in computer network diagrams.

A

Cloud computing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Anyone can access. Cloud-based computing resources (such as platforms, applications, and storage) are made available to the public by a cloud service provider. The service provider may require a fee for using these resources.

A

Public cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Provides resources to a single organization. Access is granted only to users within the organization. Are typically hosted internally, but an organization may use third-party hosting because of the necessary expense and expertise.

A

Private cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Is a combination of public and private clouds that are leveraged for certain kinds of apps.

A

Hybrid cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Delivers infrastructure to the client, such as processing, storage, networks, and virtualized environments. The customer rents the infrastructure components that they need.

A

Infrastructure as a Service (IaaS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

With IaaS, the provider is responsible for managing the following aspects of the infrastructure:

A

Computing power
Storage
Networking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

With IaaS, the customer is responsible for managing:

A

Operating systems
Applications
Data
Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Examples of IaaS

A

Azure virtual machines and Azure storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

The deployment comes without the cost and complexity of buying and managing the underlying hardware and software layers. Is often used for development, analytics, and business intelligence.

A

Platform as a Service (PaaS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

With Paas, the provider is responsible for managing the following aspects of the platform:

A

Operating Systems
Computing power
Storage
Networking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

With PaaS, the customer is responsible for managing:

A

Data
Access
Applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Examples of PaaS

A

Azure App Services and Azure SQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Delivers software applications to the client over the internet or on a local area network. It is by far the most used model.

A

Software as a Service (SaaS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

With software as a service, the provider is responsible for managing the following aspects of the software applications:

A

Operating system
Networking
Storage
Computing power
Applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Examples of SaaS

A

Microsoft Outlook, Calendar, Teams, OneDrive, and Office 365

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Is a term used to define physical objects that communicate with other systems over a public or private network.

A

Internet of Thins (IoT)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Azure services are managed through this, a dashboard with a graphical user interface.

A

Azure Portal

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Is a management service that provides a location to manage all resources in your Azure account.

A

Azure Resource Manager (ARM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

provides a one-stop shop for organizations to purchase third-party software and services designed and certified to run on Azure.

A

Azure Marketplace

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Include one or more data centers within the same region that are located in different geographical locations.

A

Availability zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Resource groups are logical containers for resources.

A

Resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Combines user accounts with the resources each user has created.

A

Subscriptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Used to administer multiple subscriptions, policies, compliance, and access.

A

Management groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Data centers that are organized into geographical areas. Each one comprises of one or more data centers.

A

Regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Benefits of regions:

A

Resources can be closer to the user
Load balancing
Scalability
Redundancy
Resiliency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Designed specifically to address governmental legal and compliance concerns. These regions may be specific to your state or country.

A

Azure’s special regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Include one or more data centers within the same region in different geographical locations. The centers are connected using private fiber-optic networks. Each center can operate on its own if needed so that if one location stops working, the other will continue operations.

A

Availability zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Established to provide even further redundancy. If a natural disaster or other event were to impact two or more data centers in the same region, all services would fail over to the region’s pair.

A

Region pairs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Items that can be managed using Azure. This could include:
Virtual machines
SQL databases
Storage
Web apps

A

Resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Contain one or more resources to be managed and could include:
Virtual machines
SQL databases
Storage
Web apps

A

Management groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Using Azure Resource Manager, you can:

A

Create resources
Update resources
Delete resources
Secure resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Increase stability and reduce hardware costs. Windows Server, Windows Client, or Linux ones can be created on demand.

A

Virtual Machines

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Azure Virtual Machines can be used for:

A

Times when you need full control over a machine.
Running custom software.
Testing and development.
Increasing the size of a data center.
Applications with fluctuating demands.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Web apps, configurations, and files are packaged together so they can be consistently shared and deployed over the cloud.

A

Azure Container Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Azure Container Instances can be used when:

A

You need to run multiple isolated container instances on one computer.
You do not need to have full control over the VM.
You want to develop without worrying about managing a full virtual machine.
You need to split your app into logical parts for maintenance and scalability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

An application and desktop virtualization that can be run anywhere in the world using any operating system and any modern browser.

A

Azure Virtual Desktop

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Azure Virtual Desktop can be used when:

A

You do not want to risk personal data stored on a laptop or other physical device.
Your end-users are using different operating systems.
Your users are scattered across different locations and need anywhere-access.
You need to accommodate users using various operating systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

An orchestration service that can be used to manage numerous container instances (nodes).

A

Azure Kubernetes Service (AKS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Can be used when you need to manage a large number of container instances.

A

Azure Kubernetes Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Provide a method for Azure VMs, databases, and apps to communicate.

A

Azure virtual networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

The following methods can be used to extend your virtual network:

A

Azure ExpressRoute
Point-to-site private networks
Site-to-site private networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Azure virtual networks can be used for:

A

Segmentation (subnets)
Isolation
Network traffic filtering
Communication between local and Azure resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Provides a secure connection between an Azure virtual network and another network.

A

Azure VPN Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

VPN Gateways can be used to establish the following connections:

A

Network-to-network connection
Site-to-site connection
Point-to-site connection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

A private connection between your on-premises network and Microsoft cloud services such as Azure.

A

Azure ExpressRoute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Unlike a VPN that is limited to around 1.25 Gbps network speed, Azure ExpressRoute can provide up to how many Gbps?

A

10

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Useful when you need faster speeds, lower latency, and increased reliability over regular internet connectivity.

A

Azure ExpressRoute

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Provides a low-latency option for connecting one virtual network to another. Traffic between the two networks is done on Microsoft’s private infrastructure instead of over the Internet.

A

Virtual network peering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Is useful for database failover and data replication.

A

Virtual network peering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

Houses large amounts of unstructured data such as images, audio, video, and text.

A

Blob storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Items stored in blob storage are called?

A

Blobs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Are organized into containers. This data is connected to user accounts and can be accessed from anywhere.

A

Blobs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Blob storage is often used for:

A

Files that need distributed access
Streaming video
Backup and disaster recovery data
Browser images or documents

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Used with Azure Virtual Machines. Azure provides hard disks, solid-state drives, and ultra disks.

A

Azure-managed disks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Azure-managed disks are valuable when you need:

A

A high level of availability
A large number (potentially thousands) of virtual machines
Protection against regional disasters
Protection from datacenter failures

56
Q

Provide cloud-based file shares. These file shares can be accessed by Windows, macOS, or Linux deployments can access these file shares on the premises or in the cloud.

A

Azure files

57
Q

Can be shared using a URL. Shares can be long-term or managed for a shorter term using Shared Access Signature (SAS) tokens.

A

Azure Files

58
Q

File storage are useful for:

A

Sharing files between on-premise or cloud-based applications
Sharing files between multiple virtual machines

59
Q

Designed to store important data, but does not need to be accessed regularly.

A

Archive storage

60
Q

Archive storage is useful for:

A

Storing old data for compliance purposes
Long-term backup
Surveillance footage

61
Q

Useful when you need a reliable relational database based on MySQL without the hassle of database design, build, and management.

A

Azure Database for MySQL

62
Q

An Azure hosted NoSQL database system. You can choose to use any of the following API/database types:
Core (SQL)
Cassandra
Gremlin
MongoDB
Azure Table

A

Cosmos DB

63
Q

Useful when you want to migrate your database to Azure, but you do not want to change your API.

A

Cosmos DB

64
Q

A platform as a service (PaaS) hosted by Microsoft. The backend infrastructure, upgrades, backups, and monitoring are fully managed, so you just need to focus on your data.

A

Azure SQL Database

65
Q

Useful when you need a highly reliable, high-performing relational database without the hassle of database management.

A

Azure SQL Database

66
Q

A relational database service hosted by Microsoft. The backend infrastructure, upgrades, and monitoring are fully managed so you can focus on your data.

A

Azure Database for MySQL

67
Q

Useful when you need a reliable relational database based on MySQL without the hassle of database design, building, and management.

A

Azure Database for MySQL

68
Q

A relational database service. Microsoft handles configuration, replication, backups, security, and monitoring.

A

Azure Database for PostgreSQL

69
Q

Is useful when you need a reliable relational database based on the PostgreSQL database engine.

A

Azure Database for PostgreSQL

70
Q

A more advanced version of the Azure SQL Database PaaS service.

A

Azure SQL Managed Instance

71
Q

Useful when you need the benefits of a hosted SQL database, but you need more functionality than is provided by Azure SQL Database.

A

Azure SQL Managed Instance

72
Q

Involves data collection, processing, and analytics; specifically, data that is too complicated or too large for standard analytics software.

A

Big data

73
Q

A big data solution that combines data warehousing and analytics, including:
Synapse SQL (distributed query service)
Spark (an open-source big data solution)
Synapse pipelines
Synapse tudio (data management, tasks, and user experience building)

A

Azure Synapse Analytics

74
Q

Can be used to quickly gather, analyze, and draw insights from all of your data warehouses.

A

Azure Synapse Analytics

75
Q

Useful when you need an open-source analytics solution that supports a variety of frameworks:
As a PaaS
As a cloud-based analytics service
To supports Hadoop, Apache Spark, R, Hive, and other frameworks

A

HDInsight

76
Q

Useful when focusing on data collaboration and transformation instead of data management.
Is a PaaS cloud-based analytics service
Works with the Hadoop framework
Has two development environments for data applications:
Azure Databricks Workspace
Azure Databricks SQL Analytics

A

Azure Databricks

77
Q

Computer software designed to simulate a human’s intelligence and information processing capabilities.

A

Artificial Intelligence (AI)

78
Q

Teaches computer software how to process information and make predictions based on that data.

A

Machine learning (ML)

79
Q

Azure Machine Learning is:

A

A cloud-based service
Used for training, deploying, and managing machine learning models

80
Q

Used to integrate cognitive intelligence into apps, including:
A cloud-based service
Four cognitive services:
Speech (speech recognition)
Vision (video and image analysis)
Decision (identify offensive content and personalize a user’s experience)
Language (interpret the intended message, not just individual words)

A

Cognitive Services

81
Q

A managed service for bot development.

A

Azure Bot Service

82
Q

A suite of services designed for use throughout the software development life cycle (SDLC).

A

Azure DevOps

83
Q

A repository where developers can publish source code for feedback and peer collaboration.

A

Azure Repos

84
Q

Uses continuous integration (CI) and continuous delivery (CD) for building, testing, and distribution.

A

Azure Pipelines

85
Q

A repository for source code artifacts.

A

Azure Artifacts

86
Q

A visual Kanban-style method for managing and tracking development projects.

A

Azure Boards

87
Q

Used to manage software testing.

A

Azure Test Plans

88
Q

What tools are available in the Azure DevOps?

A

Repos, Pipelines, Artifacts, Boards and Test Plans

89
Q

An environment for testing. You can test the creation and management of virtual machines, IaaS, and PaaS before purchasing and implementing them in a live setting.

A

DevTest Labs

90
Q

Designed for developers looking to create custom solutions for their IoT platform.

A

Azure IoT Hub

91
Q

A PaaS solution
Can be integrated with other Azure services
A bi-directional, centralized messaging hub that communicates between your IoT management application and its devices
Designed for developers looking to develop custom solutions for their IoT platform using Python, Java, C, C#, and Node.js
Secure, reliable, and scalable

A

Azure IoT Hub

92
Q

An application platform that provides software to connect your IoT devices to the cloud.

A

Azure IoT Central

93
Q

Is a SaaS solution
Provides standardized templates for building applications
Simplifies your design processes and reduces the cost of development and management
Is secure, reliable, and scalable
Can be used to manage your own IoT devices without in-depth knowledge of IoT application development

A

IoT Central

94
Q

Used for creating and programming IoT devices, including:
Certified chips known as microcontroller units (MCUs)
A Microsoft managed Linux-based operating system
Azure Security Service

A

Azure Sphere

95
Q

Run code when triggered by Azure and on-premises system events that need an immediate response
Allow you to focus on the code running your service instead of its infrastructure
Support .NET, Java, Python, PowerShell, and several other languages

A

Azure Functions

96
Q

Is used for scheduling, automating, and orchestrating workflow
Includes pre-built connectors for Microsoft services and third-party services

A

Logic Apps

97
Q

a centralized, web-based interface for creating, monitoring, and managing your simple Azure deployments and applications.

A

Azure Portal

98
Q

a command-line interface preferred by Windows users that:
Can be used with Linux, Windows, and iOS
Is used for automation
Uses simple commands (cmdlets)
Is run on a user’s local machine

A

Azure PowerShell

99
Q

Used with Linux, Windows, and iOS.
Is often used with a command-line interface
Is used for automation
Is run on a user’s local machine

A

Azure CLI

100
Q

Connects to a preinstalled Azure PowerShell or Azure CLI terminal.

A

Azure Cloud Shell

101
Q

Uses a web browser
Can be accessed using the Azure Mobile App on a mobile device
Is a free service

A

Azure Cloud Shell

102
Q

Used to deploy and manage all resources and resource groups.
Controls access to resources using the privileges defined by Azure Active Directory.

A

Azure Resource Manager (ARM)

103
Q

You can use to connect to your Azure resources. You can monitor and manage virtual devices and applications using this.

A

Azure Mobile App

104
Q

Outlines issues related to personal data. It applies to all Microsoft products, including services, apps, software, servers, and devices.

A

Microsoft Privacy Statement

105
Q

Personal data Microsoft collects
How collected data is used
Reasons for sharing personal data
Information about cookies, web beacons, and other data collection tools
Situation and product-specific privacy information
Methods for accessing and controlling a user’s data

A

Microsoft Privacy Statement topics

106
Q

A legal agreement. When customers sign the OST, they agree to the privacy terms and conditions that apply to the purchased online service(s).

A

Online Services Terms (OST)

107
Q

An addendum to the OST. It provides additional information about the data processing and security terms and conditions for purchased service(s). Topics include:
Government compliance
Data security
Data handling

A

Data Protection Addendum (DPA)

108
Q

A website for an individual or an organization who wants to learn more about all of Microsoft’s privacy, security, and compliance efforts.

A

The Microsoft Trust Center

109
Q

Created to address information and data security for the criminal justice and law enforcement fields. It is a collection of requirements and standards for local, state, and federal agencies.

A

Criminal Justice Information Services (CJIS)

110
Q

A standard created to address information and data security for the health care field.

A

The Health Insurance Portability and Accountability Act (HIPAA)

111
Q

Standards include the following enforcements for cloud-stored data. These standards ensure that customer data is not used for marketing or advertising purposes and that the data will not be shared unless there is a legally binding order for disclosure.

A

International Organization of Standards/International Electrotechnical Commission (ISO/IEC)

112
Q

An agency of the U.S. Department of Commerce.
Encourages technological advancements and provides recommendations for data protection.

A

National Institute of Standards (NIST)

113
Q

The name for Azure cloud regions designed only for United States government use.
Physically managed separately from the traditional Microsoft Azure service.

A

Azure Government

114
Q

It is designed to address special requirements and regulations specific to a particular government, whether on a country, state, or local level.

A

Azure Government

115
Q

The United States Department of Defense (DoD) uses Azure Government. The United States is divided into several regions, including:

A

S DoD East
US DoD Central
US Gov Texas
US Gov Arizona
US Gov Virginia

116
Q

Is the responsibility of both the customer and the cloud provider.

A

Cloud security

117
Q

Microsoft has approached security measures based on:

A

Confidentiality, integrity and availability (CIA principles).

118
Q

Includes data stored in databases, virtual machines, cloud storage, and SaaS applications. Many regulatory requirements are in place to ensure that data remains confidential.

A

Data layer

119
Q

Includes applications and application secret storage. Ideally, an organization should integrate security into its application development process.

A

Application layer

120
Q

Includes virtual machines, systems, and endpoints. Each of these should be secured and should have access controls in place.

A

Compute layer

121
Q

Includes all network resources. Network segments, secure connectivity, limited internet access, and secure connectivity between cloud and on-premises networks help with this defense.

A

Network

122
Q

Firewalls and DDoS protection are the primary defenses at this level. It’s harder to eliminate a threat once it has breached your perimeter.

A

Perimeter level

123
Q

Defense measures include SSO and multifactor authentication, control access, and event audits, ensuring that access is only granted as needed and logging all events and changes.

A

Identity and access

124
Q

Includes building security and data center access. Physical defenses help to ensure that only authorized individuals have access to a building or a data center and that any loss or theft is documented and addressed

A

Physical layer

125
Q

A centralized security monitoring service that helps to protect your services from security threats.

A

Azure Security Center

126
Q

Monitors cloud and on-premises services
Monitors resources
Performs security assessments
Identifies vulnerabilities
Detects and stops malware installation
Applies security settings to new resources

A

Azure Security Center

127
Q

A security information and event management (SIEM) system. SIEM systems collect data from various sources for threat detection and response that includes:
Data collection from cloud and on-premises
Microsoft analytics and threat intelligence to detect hidden threats
Task automation to respond to incidents quickly

A

Azure Sentinel

128
Q

A centralized cloud service that stores highly sensitive secrets such as passwords, certificates, tokens, and API keys.

A

Azure Key Vault

129
Q

Stores and manages sensitive information
Can be used to create and manage encryption keys
Can be used to create and manage SSL/TLS certificates for both internal and Azure resources
Provides access control and access monitoring

A

Azure Key Vault

130
Q

Ensures that your VMs are hosted on dedicated physical servers. You can select the appropriate Azure region, availability zone, and fault domain to help ensure high availability.

A

Azure Dedicated Host

131
Q

Inspects network traffic and filters network traffic. Traffic can be filtered by port number, protocol, FQDN, and network address. Network administrators can set NAT, network, or application rules to deny or allow various traffic types.

A

Azure Firewall

132
Q

Reviews the traffic, compares it to the existing rules, and permits or blocks the traffic accordingly.

A

Azure Firewall

133
Q

Provides a level of defense against several types of distributed denial-of-service attacks, including:
Volumetric attacks
Resource-level attacks
Protocol attacks

A

Azure DDoS Protection

134
Q

Firewall services offered by Azure. These NSGs filter network traffic between services in an Azure virtual network.

A

Network security groups (NSG)

135
Q
A