Az-900 Flashcards

1
Q

What is CAPEX

A

Capital expenditure, cannot fully deduct the cost form fiscal year the assest was paid for in. In premise model.
Cost is fixed, you know exactly how much is being spent (buying servers and equipment for datacenter is CapEx)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is OPEX

A

Operating expenses, deducted in the same year they are made (cloud computing)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is elasticity in cloud computing ?

A

Cloud computing feature that allows to cover peaks and valleys of demand when data/usage changes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is reliability ?

A

Cloud computing feature that offers high availability against failures, allows fast disaster recovery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is fault tolerance ?

A

Form of redundancy (expensive one)

Fault Tolerance simply means a system’s ability to continue operating uninterrupted despite the failure of one or more of its components. This is true whether it is a computer system, a cloud cluster, a network, or something else. In other words, fault tolerance refers to how an operating system (OS) responds to and allows for software or hardware malfunctions and failures.

An OS’s ability to recover and tolerate faults without failing can be handled by hardware, software, or a combined solution leveraging load balancers(see more below). Some computer systems use multiple duplicate fault tolerant systems to handle faults gracefully. This is called a fault tolerant network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is PaaS ?

A

Platform as a Service

Azure example: Azure Logic Apps, Azure Functions, Azure Web jobs, Azure Automation
Pizza example: Order delivery Pizza to home

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Azure Logic Apps ?

A

Cloud-based platform for creating and running automated workflows that integrate your apps, data, services, and systems

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Azure Web Jobs

A

WebJobs is a feature of Azure App Service that enables you to run a program or script in the same instance as a web app, API app, or mobile app. There is no additional cost to use WebJobs.

You can use the Azure WebJobs SDK with WebJobs to simplify many programming tasks. WebJobs is not yet supported for App Service on Linux

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Azure Automation ?

A

New service in Azure that allows you to automate your Azure management tasks and to orchestrate actions across external systems from right within Azure. It is built on PowerShell Workflow, so you can take advantage of the language’s many features.

Azure Automation delivers a cloud-based automation, operating system updates, and configuration service that supports consistent management across your Azure and non-Azure environments. It includes process automation, configuration management, update management, shared capabilities, and heterogeneous features.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is SaaS ?

A

Software as a Service

Azure example: Share point, Onedrive for Business, Teams, Power Platform
Pizza example: Eat Pizza at restaurant

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is IaaS ?

A

Infrastructure as a Service

Azure example: Azure Compute, Azure Storage
Pizza example: Supermarket Pizza

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Public Cloud ?

A

Service provided by 3rd party provider, hardware can be shared among multiple tenants (Azure office 365)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Private Cloud ?

A

Service provided by 3rd party provider, hardware is only used by single company, which often owns the the hardware and data center (Azure Stack)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Hybrid Cloud ?

A

Combination of public and private cloud, with automation and orchestration between the two (Azure Stack)

Azure Stack is a portfolio of products that extend Azure services and capabilities to your environment of choice—from the datacenter to edge locations and remote offices. Build and deploy hybrid and edge computing applications and run them consistently across location boundaries.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Community Cloud ?

A

Hardware is shared between different organizations from a specific community with common concerns (security, compliance, jurisdiction etc..). Governamental: Azure Government, Azure China, Azure Germany

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Azure Active Directory ?

A

Azure Active Directory (Azure AD) is a cloud-based identity and access management service. This service helps your employees access external resources, such as Microsoft 365, the Azure portal, and thousands of other SaaS applications. Azure AD also helps them access internal resources. These are resources like apps on your corporate network and intranet, along with any cloud apps developed by your own organization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is Network Security Group ?

A

An Azure Network Security Group (NSG) is a core component of Azure’s security fabric. Leveraging an NSG, you can filter traffic to and from Azure resources that you have commissioned on an Azure Virtual Network (VNet).

At its core, an NSG is effectively a set of access control rules you assign to an Azure resource. It inspects inbound and outbound traffic and uses these rules to determine whether it should grant or deny access to a particular network packet. At a high level, Azure groups NSG rules into inbound and outbound. The management and configuration of these rules are similar to those you find on a traditional firewall. Using the Azure Portal, Azure PowerShell, or Azure CLI, you can manage an Azure NSG and specify the source and destination IPs, port, and protocol.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Azure Traffic Manager ?

A

*** DNS based traffic load balancer
Azure Traffic Manager is a DNS-based traffic load balancer. This service allows you to distribute traffic to your public facing applications across the global Azure regions. Traffic Manager also provides your public endpoints with high availability and quick responsiveness.

Traffic Manager uses DNS to direct the client requests to the appropriate service endpoint based on a traffic-routing method. Traffic manager also provides health monitoring for every endpoint. The endpoint can be any Internet-facing service hosted inside or outside of Azure. Traffic Manager provides a range of traffic-routing methods and endpoint monitoring options to suit different application needs and automatic failover models. Traffic Manager is resilient to failure, including the failure of an entire Azure region.
Azure provides a suite of fully managed load-balancing solutions for your scenarios.
1) If you want to load balance between your servers in a region at the application layer, review Application Gateway.
2) If you need to optimize global routing of your web traffic and optimize top-tier end-user performance and reliability through quick global failover, see Front Door.
3) To do network layer load balancing, review Load Balancer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q
What is a load balancer designed for layer 7 (application)?
(one)
a. Load Balancer 
b. Traffic Manager 
c. Application Gateway 
d. Network Security Group
A

c. Application Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is Application Gateway ?

A

** Basically a load-balancer

Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Traditional load balancers operate at the transport layer (OSI layer 4 - TCP and UDP) and route traffic based on source IP address and port, to a destination IP address and port.

Application Gateway can make routing decisions based on additional attributes of an HTTP request, for example URI path or host headers. For example, you can route traffic based on the incoming URL. So if /images is in the incoming URL, you can route traffic to a specific set of servers (known as a pool) configured for images. If /video is in the URL, that traffic is routed to another pool that’s optimized for videos.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is Azure Service Health ?

A

Azure Service Health is a suite of tools that provide personalized guidance and support when issues with Azure services affect you.

Track events:

  • Service issues
  • Planned maintenance
  • Health advisories
  • Manage health alerts
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Compliance Manager ?

A
  • Compliance Manager is a workflow-based risk assessment dashboard within the Trust Portal that enables you to track, assign, and verify your organization’s regulatory compliance activities related to Microsoft professional services and Microsoft cloud service.
  • Enables you to track, assign, and verify your organization’s regulatory compliance activities related to Microsoft professional services and Microsoft cloud services.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is Resource Health ?

A

Resource Health helps you diagnose and obtain support when an Azure service issue affects your resources

24
Q

What is Azure Monitor ?

A

Azure Monitor collects, analyzes, and provides actions on telemetry from your cloud and on-premises environments.

https://docs.microsoft.com/en-us/azure/azure-monitor/overview

25
Q

What is Azure Service Health ?

A

Azure Service Health is a suite of experiences that provide personalized guidance and support when issues in Azure services are or may affect you in the future. Azure Service Health is composed of:

  • Azure status
  • Service health service
  • Resource Health
26
Q

What is Application Insight ?

A

Application Insights is a feature of Azure Monitor that provides extensible application performance management (APM) and monitoring for live web apps. Developers and DevOps professionals can use Application Insights to:

  • Automatically detect performance anomalies.
  • Help diagnose issues by using powerful analytics tools.
  • See what users actually do with apps.
  • Help continuously improve app performance and usability.
27
Q

What is Azure Kubernetes Service (AKS ) ?

A

Azure Kubernetes Service is a container orchestrator, which allows you run containers at scale without having to manage underlying VMs

28
Q

What is Azure Container Instance ?

A

Azure Container Instances allows you to deploy containers directly to Azure

29
Q

What is Azure Key Vault ?

A

Centralized cloud service for storing application secrets, referred to as a secret store.

30
Q

What is Service Trust Portal ?

A

Service Trust Portal provides information about compliance with standards, laws, and regulations, in addition to hosting the Compliance Manager application.

The Service Trust Portal contains details about Microsoft’s implementation of controls and processes that protect our cloud services and the customer data therein. To access some of the resources on the Service Trust Portal, you must log in as an authenticated user with your Microsoft cloud services account (Azure Active Directory organization account) and review and accept the Microsoft Non-Disclosure Agreement for Compliance Materials.

31
Q

What is Azure Active Directory Domain Services (Azure AD DS)

A

Azure Active Directory Domain Services (Azure AD DS) provides managed domain services such as domain join, group policy, lightweight directory access protocol (LDAP), and Kerberos/NTLM authentication. You use these domain services without the need to deploy, manage, and patch domain controllers (DCs) in the cloud.

An Azure AD DS managed domain lets you run legacy applications in the cloud that can’t use modern authentication methods, or where you don’t want directory lookups to always go back to an on-premises AD DS environment. You can lift and shift those legacy applications from your on-premises environment into a managed domain, without needing to manage the AD DS environment in the cloud.

Azure AD DS integrates with your existing Azure AD tenant

32
Q

What is Azure Front Door?

A

*** Basically a CDN

Azure Front Door can help you deliver higher availability, lower latency, greater scale, and more secure experiences to your users wherever they are.

Azure Front Door is Microsoft’s modern cloud Content Delivery Network (CDN) that provides fast, reliable, and secure access between your users and your applications’ static and dynamic web content across the globe. Azure Front Door delivers your content using the Microsoft’s global edge network with hundreds of global and local POPs distributed around the world close to both your enterprise and consumer end users.

33
Q

What is Azure Stack Hub ?

A

Azure Stack Hub is an extension of Azure that provides a way to run apps in an on-premises environment and deliver Azure services in your datacenter. With a consistent cloud platform, organizations can confidently make technology decisions based on business requirements, rather than business decisions based on technology limitations.

34
Q

Azure Active Directory B2C

A

Azure Active Directory B2C provides business-to-customer identity as a service. Your customers use their preferred social, enterprise, or local account identities to get single sign-on access to your applications and APIs.

35
Q

Sign-up policy / Sign.in policy

A
Sign-up = allows user to create account
Sing-in = allows user to login
36
Q

Azure AD Privileged Identity Management

A
  • Privileged Identity Management (PIM) is a service in Azure Active Directory (Azure AD) that enables you to manage, control, and monitor access to important resources in your organization. These resources include resources in Azure AD, Azure, and other Microsoft Online Services such as Microsoft 365 or Microsoft Intune.
  • Organizations want to minimize the number of people who have access to secure information or resources, because that reduces the chance of
  • a malicious actor getting access
  • an authorized user inadvertently impacting a sensitive resource
37
Q

Which azure component provides information about planned maintenance such as deprecated offerings ?

a. Azure Service Health
b. Azure Security Center
c. Azure Advisor
d. Azure Monitor

A

Azure Service Health

38
Q

What is DPA ?

A

DPA (Data Processing Agreement) is a document that defines the terms on how the data in general is processed and protected.

39
Q

What is Azure Synapse Analytics ?

A

Azure Synapse Analytics is an enterprise data warehousing and Big Data analytics service. It consists of four components:

  • Synapse SQL
  • Spark (with Apache Spark)
  • Synapse pipelines /for hybrid data integration)
  • Studio (unified user experience)
40
Q

What is Azure Event Hub

A

PaaS offering thant can ingest and process millions of events per second from websites, mobile apps and IoT devices.

41
Q

What is Azure Sphere

A

Combination of hardware. software and security services that enable secure processing and communication of internet connected devices (does not provide data warehousing

42
Q

What is Azure Security Center ?

A
  • Azure Security Center provides monitoring, security recommendations, and advanced data protection for cloud and on-premises VM resources. Resources and workloads are protected across a hybrid environment.
  • Supports Windows and Linux
  • Discovers and assesses security for new resources as they are deployed
43
Q

What is Azure SQL Managed Instance ?

A

Lift and shift instance of the on-premises SQL-Server with minimal changes to an Azure PaaS solution
nearly 100% compatibility with latest version of the SQL Server Enterprise edition

44
Q

What is Azure Hybrid Benefit ?

A

License that allows you to use existing Windows Server licenses to run Windows VMs in Azure. You pay only for infrastructure costs

45
Q

What is Azure Spot pricing ?

A

Provides access to Azure resources at deep discounts when unused capacity is available.

  • Spot VMs do not use the standard SLA for Azure VMs, there is no SLA
  • you can set the max. price you want to pay, you can set the capped price
46
Q

What is Azure Advisor ?

A

Personal cloud consultant that provides info you need to follow best practices and optimize Azure deployments- Can provide recommendations for proactive, actionable and personalized best practices

47
Q

What is Azure Monitor ?

A

can autoscale to add or remove resources to load requirements

48
Q

What is Azure Service Health ?

A

Provides info about the issues and their impact, provides updates as issues are resolved. Keeps you informed about service outages and planned maintenances

49
Q

What is Azure Databrics ?

A

Apache Spark based analytics platform to provide a collaborative analytics workflow.
Can read data from multiple resources to support big data analysis project
Supports several database and storage options Cosmos DB, Azure SQL, MySQL

50
Q

What is Azure SQL Managed Instance ?

A

A provided physical server dedicated to your organization only. Isolated, do not share any customers
Cannot be shared between multiple subscriptions, dedicated to one subs only
You are not charged per number of VM deployed

51
Q

What is CAL ?

A

Windows Server Client Access Licenses (CAL)

52
Q

What is Composite SLA ?

A

99.99% x 99.95% = 99.94%

53
Q

Microsoft Trust Center

A
  • In-depth information about security, privacy, compliance offerings, policies, features, and practices across Microsoft cloud * products.
  • Additional resources for each topic.
  • Links to the security, privacy, and compliance blogs and upcoming events.
  • The Trust Center is a great resource for other people in your organization who might play a role in security, privacy, and compliance. These people include business managers, risk assessment and privacy officers, and legal compliance teams.
54
Q

Management Group

A
  • Management groups provide a governance scope above subscriptions. You organize subscriptions into management groups the governance conditions you apply cascade by inheritence to all associated subscriptions.
  • Management groups give you enterprise-grade management at scale no matter what type of subscriptions you might have. However, all subscriptions within a single management group must trust the same Azure Active Directory (Azure AD) tenant.
55
Q

Azure Pricing Calculator

A

Azure Cost Calculator is a free cost management tool that can help you estimate your cloud costs for new Azure deployments, or variations of your existing workloads.

56
Q

Azure Dedicated Host

A
  • Azure Dedicated Host provides physical servers that host one or more Azure virtual machines. Your server is dedicated to your organization and workloads—capacity isn’t shared with other customers.
  • This host-level isolation helps address compliance requirements. As you provision the host, you gain visibility into and control over the placement of your Azure VMs, and you determine the host’s maintenance policies.
57
Q

PostgreSQL Flexible Server / Hyperscale (Citus)

A
  • Azure Database for PostgreSQL - Flexible Server is a fully managed database service designed to provide more granular control and flexibility over database management functions and configuration settings
  • Hyperscale (Citus) is a deployment option that horizontally scales queries across multiple machines using sharding. Its query engine parallelizes incoming SQL queries across these servers for faster responses on large datasets. It serves applications that require greater scale and performance than other deployment options: generally workloads that are approaching–or already exceed–100 GB of data.