Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

My Az-204 > Azure Compute solutions > Flashcards

Azure Compute solutions Flashcards

ACR, Azure Functions, Azure App Service web apps

1
Q

What’s an Azure Container Registry (ACR)

A

is a managed, private Docker registry service based on the open-source Docker Registry 2.0.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the Azure Container Registry service tiers?

A

Basic, Standard and Premium

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Explain the Basic tier of ACR service

A

A cost-optimized entry point for developers learning about Azure Container Registry. Basic registries have the same programmatic capabilities as Standard and Premium (such as Azure Active Directory authentication integration, image deletion, and webhooks). However, the included storage and image throughput are most appropriate for lower usage scenarios.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Explain the Standard tier of ACR service?

A

Standard registries offer the same capabilities as Basic, with increased included storage and image throughput. Standard registries should satisfy the needs of most production scenarios.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Explain the Premium tier of ACR service?

A

provide the highest amount of included storage and concurrent operations, enabling high-volume scenarios.
higher image throughput
Premium adds features such as geo-replication for managing a single registry across multiple regions, content trust for image tag signing, and private link with private endpoints to restrict access to the registry.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the different Azure storage features?

A

Encryption-at-rest, Regional storage, zone redudnancy, scalable storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Explain encryption-at-rest feature in Azure storage.

A

All container images in your registry are encrypted at rest. Azure automatically encrypts an image before storing it, and decrypts it on-the-fly when you or your applications and services pull the image.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Explain regional storage feature in Azure Storage

A

Azure Container Registry stores data in the region where the registry is created, to help customers meet data residency and compliance requirements. In all regions except Brazil South and Southeast Asia, Azure may also store registry data in a paired region in the same geography. In the Brazil South and Southeast Asia regions, registry data is always confined to the region, to accommodate data residency requirements for those regions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Explain zone redundancy feature in Azure Storage

A

A feature of the Premium service tier, zone redundancy uses Azure availability zones to replicate your registry to a minimum of three separate zones in each enabled region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Explain scalable storage feature in Azure Storage

A

allow you to create as many repos, images, layers, or tags as you need, up to the registry storage limit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the different scenarious for ACR Tasks?

A

Quick task, Automatically triggered tasks, multi-step task

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What’s Quick task?

A

Build and push a single container image to a container registry on-demand, in Azure, without needing a local Docker Engine installation. It provides an integrated development experience by offloading your container image builds to Azure.

Benefit; you can verify your automated build definitions and catch potential problems prior to committing your code.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What’s multi-step task?

A

it’s defined in a YAML file specifying individual build/ push operations for container images or other artifacts. Also define execution of one or more containers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What’s a Dockerfile?

A

a script that contains a series of instructions that are used to build a Docker image

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does a dockerfile include?

A

The base or parent image we use to create the new image. Commands to update the base OS and install other software. Build artifacts to include, such as a developed application.Services to expose, such a storage and network configuration. Command to run when the container is launched.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What can you use ACR Task for?

A

Create an Azure Container Registry. Build and push image from a Dockerfile. Run the image in the ACR.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is ACR Tasks?

A

a set of features within ACR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Azure Container Instances (CI)?

A

a service that let developer easily to deploy container on Azure cloud platform

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What’s container group in CI?

A

collection of containers that get scheduled on the same host machine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does container in a container group?

A

container in a container group share lifecycle, local network and storage volume (similar to pods in Kubernetes)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the two ways of deploying container group?

A

Resource Manager template and YAML file

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

When to use Resource Manager template to deploy container group?

A

when deploy additional Azure service resources (eg. Azure Files share) when u deploy CI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

When to use YAML file to deploy container group?

A

when your deployment includes only container instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Give a scenario to use multi-container groups

A

useful where u want to divide a single functional task into a few container images

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does it mean that Azure CI is stateless?

A

if container crash/stops, all of its state is lost

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are the limitations of mounting Azure file share in Azure CI?

A
  1. only mount Azure Files shares to Linux containers
  2. Azure file share volume mount requires the Linux container run as root
  3. Azure File share volume mounts are limits to CIFS support
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are the restarts policies for running containerized tasks?

A

Always = default setting when no restart policy
Never
OnFailure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What’s Azure Container Apps (CA)?

A

a fully managed environment that enables you to run containerized applications and microservices on a serverless platform

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is Azure CA common used for?

A
  1. Deploy API endpoints
  2. Host background processing applications
  3. Handle event-driven processing
  4. Run microservices
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What are the limitations of Azure CA?

A
  1. can’t run priviliged container. can’t process root access.
  2. Linux-based (linux/amd64) container images are required
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What can Azure CA handle for you with its built-in authentication and authorization features?

A
  1. Authenticates users/clients
  2. manages the authenticated session
  3. inject identity info into HTTP request headers
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What happens when Authen/author feature is enabled in Azure CA?

A

when the middleware is enabled, every incoming HTTP request passes through the security layer before being handled by your app.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is revision in Azure CA?

A

Revision is an unchangeable/immutable snapshot of a container app version.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

How are secrets updated/ deleted in Azure CA?

A

Updated or deleted secrets doesn’t automatically affect existing revisions in your app. To do it you can:
1. Deploy a new revision
2. Restart an existing revision

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What’s Azure App Service?

A

an HTTP-based service (PaaS) for hosting web apps, REST APIs, mobile back ends.
Develop in any languages/framework

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Benefit with Azure App Service?

A
  1. Built-in auto scale support
  2. Continuous integration/deployment support
  3. Deployment slots
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What are the limitations of Azure App Service?

A
  1. App service on Linux are NOT supported on Shared pricing tier
  2. The Azure portal shows only features that currently work for Linux apps.
  3. Disk latency is higher and variable than latency of the container filesystem.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What does the plans in Azure App Service define?

A

defines a set of compute resources for a web app to run
1. Operating system (Windows, Linux)
2. Region (West US)
3. Number of VM instances
4. Size of VM instances (small, medium, large)
5. Pricing tier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

What are the different pricing tiers on Azure App Service?

A
  1. Shared compute:
Free, Shared
  2. Dedicated compute:
Basic, Standard, Premium, PremiumV2, PremiumV3
  3. Isolated:
    Isolated, IsolatedV2
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What’s the shared compute pricing tier?

A

Base tier. Runs app on same Azure VM as other App Service apps. Intended to use for dev and testing purposes
Fixed CPU to each app that runs on the shared resources.
Resources can’t scale out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What’s the dedicated compute pricing tier?

A

Run apps on dedicated Azure VMs.
Only apps in same App Service plan share same compute resource.
The higher tier, the more VM instances available for scale-out.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What’s the isolated pricing tier?

A

Run dedicated Azure VMs on dedicated Azure Virtual Networks.
Provides network isolation and compute isolation to your app.
Provides max scale-out capabilities

43
Q

What are the different ways to automatically deploy an App Service?

A
  1. Azure DevOps Services
  2. Bitbucket
  3. GitHub
44
Q

What are the manual ways to deploy Azure App Service?

A
  1. Git
  2. CLI
  3. Zip deploy
  4. FTP/S
45
Q

What are the inbound features of multi-tenant App Service networking feature?

A
  1. App-assigned address
  2. Access restrictions
  3. Service endpoints
  4. Private endpoints
46
Q

What are the outbound features of multi-tenant App Service networking feature?

A
  1. Hybrid Connections
  2. Gateway-required virtual network integration
  3. Virtual network integration
47
Q

Which plans host customer workloads on multitenant workers in Azure App Service?

A

free and shared SKU (stock keeping unit)

48
Q

What are configured in Application settings in web app settings?

A

Variables passed as environment variables to the app code.
Always encrypted when stored (encrypted-at-rest).

49
Q

What are configured in General settings in web app settings?

A
  1. Stack settings: language & SDK version
  2. Platform settings: conf hosting platform (Bitness, WebSocket, Always On, Manage pipeline version, HTTP version)
  3. Debugging
  4. Incoming client certificates
50
Q

What are the different Application logging types in web apps?

A
  1. Detailed error logging
  2. Failed request logging
  3. Web server logging
  4. Application logging (supported on Linux platform)
  5. Deployment logging (supported on Linux platform)
51
Q

Where are Application logging from web apps stored?

A

All logging types have location App Service file system.

Web server and application logging also has storage Azure Storage.

52
Q

Which application logging from web apps supports on Linux platform?

A

Application logging and deployment logging.
All logging types support Windows platform.

53
Q

What are the different log levels?

A
  1. Disabled
  2. Error - incl. error, critical
  3. Warning - incl. warning, error, critical
  4. Information - incl. info, warning, error, critical
  5. Verbose - incl. trace, debug, info, warning, error, critical
54
Q

What are the different options to add security certificates in App Service?

A
  1. Create a free App Service managed certificate (TLS/SSL server certificate)
  2. Purchase an App Service certificate
  3. Import from Key Vault
  4. Upload a private certificate
  5. Upload a public certificate
55
Q

Which plans allow you to create a free App Service managed certificate in App Service?

A

Azure Service plan Basic, Standard, Premium or Isolated tier.

56
Q

What are the limitations of creating a free Azure Service managed certificate?

A
  1. Doesn’t support wildcard certificates
  2. doesn’t support private DNS
  3. isn’t exportable
56
Q

When you purchase an App Service certificate what does Azure App Service manage for you?

A
  1. purchase process from certificate provider
  2. maintain cert in Azure Key Vault
  3. renewal
57
Q

When to isolate your app into a new Azure App service plan?

A
  1. the app is resource intensive
  2. you want to scale the app independently from the other apps in the existing plan
  3. the app needs resource in a different geographical region
58
Q

When should you auto scale your app?

A

when there are predictable changes in app load

59
Q

When should you NOT auto scale your app?

A
  1. When app perform resource-intensive processing as part of each req (best to manually scaling up)
  2. handling long-term growth
60
Q

What does autoscaling rules describe?

A
  1. specify a metric to monitor
  2. how autoscaling should respond when the metrics crosses a threshold.
61
Q

What are the autocale options?

A
  1. based on metrics
  2. scale to a specific instance count according to schedule
62
Q

What are the metrics you can use to autoscale?

A
  1. no. HTTP reqs awaiting processing
  2. Data in/out
  3. CPU Percentage
  4. Memory Percentage
  5. Disk Queue Length
  6. HTTP Queue Length
63
Q

What are the best practices for auto scaling?

A
  1. Max and Min value are different, and adequate margin between them
  2. Choose appropriate statistic for your diagnostics metric (Average (common), Minimum, Maximum and Total as a metric to scale by)
  3. Choose thresholds carefully for all metric types
  4. multiple rules configured
64
Q

What do you have to remember when you have multiple rules configured for auto scaling (both scale out and scale in)?

A

Scale-out, autoscale runs if any rule is met.
Scale-in, autoscale require all rules to be met

65
Q

What are deployments slots?

A

live apps w/their own host names

66
Q

What are the benefit of deploying to non-production slot?

A
  1. validate app changes in staging deployment slot before swapping it to prod slot.
  2. warmed up all instances of the slot before swapping into production
67
Q

Which Azure App Service plan tier support deployment slots?

A

Standard (5 deployment slots), Premium (20) or Isolated (20) plans

68
Q

Which settings are swapped when doing slot swapping?

A
  1. General settings (framework version, 32/64-bit, web sockets)
  2. App settings (can conf to stick to a slot)
  3. Connection strings (can conf to stick to slot)
  4. Handler mappings
  5. Public certificates
  6. WebJobs content
  7. Hybrid connections
  8. Azure Content Delivery Network
  9. Service endpoints
  10. Path mappings
69
Q

Which settings are NOT swapped when doing slot swapping?

A
  1. Publishing endpoint
  2. Custom domain names
  3. Non-public certificates and TLS/SSL settings
  4. Scale settings
  5. WebJobs schedulers
  6. IP restrictions
  7. Always On
  8. Diagnostic log settings
  9. Cross-origin resource sharing
  10. Virtual network integration
  11. Managed identities
  12. Settings that end with the suffix _EXTENSION_VERSION
70
Q

What are the different ways to route traffic?

A
  1. Route production traffic automatically
  2. Route production traffic manually
  3. Route a portion of traffic to another slot. Useful when u need feedback for a new update, but not ready to release it to prod
71
Q

What’s Azure Functions?

A

Serverless solution allowing u to write less code, maintain less infrastructure, and save on costs.

72
Q

What are bindings?

A

ways to simplify coding for input and output data

73
Q

What’s input binding?

A

The function can READ data from these input sources.
Connect to a data source

74
Q

What’s output binding?

A

The function can WRITE data to these output destinations.
Connect to a data destination

75
Q

What are the binding properties?

A
  1. Name (refer to in the code)
  2. Type
    (the type of data/service interacting with)
  3. Direction
    (in/out binding)
  4. Connection: Provides the name of an app setting key that contains the connection string. Bindings use connection strings stored in app settings to keep secrets out of the function code.
76
Q

What are the different Azure Functions plans?

A
  1. Consumption: Default hosting plan. scales automatically, pay for compute resource on running functions
  2. Premium: Automatically scales based on demand using pre-warmed workers, which run applications with no delay after being idle, runs on more powerful instances, and connects to virtual networks.
  3. Dedicated: best for predictive scaling and costs
77
Q

What are the different trigger types in Azure Functions?

A
  1. Timer: execute a func at a set interval
  2. HTTP
  3. Blob: exc when a file is uploaded/updated in Azure Blob storage
  4. Queue: exc when message added to an Azure Storage queue
  5. Azure Cosmos DB: exc when a doc changes in a collection
  6. Azure SQL: exc when a row changes in a table
  7. Event Hub: exc when an event hub receives a new event
  8. Event Grid. exc based on Event Grid subscriptions
78
Q

What’s Logic Apps?

A

Design-first technologies. Code, by creating/editing a workflow in JSON. For people w/ development skills.
Good at integration cause over 200 connectors included (interface to external service)

automate, orchestrate, and integrate disparate components of a distributed application

79
Q

What’s Microsoft Power Automate?

A

Design-first technologies.
No need of development/ IT Pro experience.
Built on Logic Apps. Intended scenarious: self-service workflow creation. GUI only.
Include testing and production environment.

80
Q

What’s WebJobs?

A

a feature of Azure App Service that enables you to run a program or script in the same instance as a web app, API app, or mobile app

81
Q

When do you choose WebJobs over Azure Functions?

A

if you have …
1. existing Azure App Service app and want to model the workflow in the app.
2. specific customizations that u want to make to the JobHost that aren’t supported by Azure Functions
3. want to control your app’s retry policies
4. WebJobs only support C# on Microsoft Windows

82
Q

What does scale up means?

A

Increase CPU, memory, disk space, extra features.

etc. moving to a higher tier to get access to more features (memory, resources)

83
Q

What’s Deployment center setting?

A

used to configure continuous deployment and manual deployment

84
Q

Which platform setting should u use when routing a client app to the same instance for the life of the session, when u manage a multi-instance deployment of an Azure App Service Web?

A

In a multi-instance deployment, the ARR Affinity setting ensures a client application is routed to the same instance for the life of the session

85
Q

What are key prefixes and labels?

A

Key prefixes are the beginning parts of keys. A set of keys can be grouped by using the same prefix in names. Labels are an attribute on keys. Labels are used to create variants of a key. For example, labels can be assigned to multiple versions of a key.

86
Q

What do you need to do to mount an Azure file share as a volume in a container?

A

Specify the share and volume mount point when you create the container.

az container create –resource-group learn-deploy-aci-rg –name aci-demo-files –image mcr.microsoft.com/azuredocs/aci-hellofiles –location eastus –ports 80 –ip-address Public –azure-file-volume-account-name $STORAGE_ACCOUNT_NAME –azure-file-volume-account-key $STORAGE_KEY –azure-file-volume-share-name aci-share-demo –azure-file-volume-mount-path /aci/logs/

87
Q

What command to use to display files contained in your file share?

A

az storage file list

eg. az storage file list -s aci-share-demo -o table

88
Q

What Azure Service app plan do you need to create custom TLS/SSL bindings or enable client certificates for ur App Service app?

A

Basic, Standard, Premium or Isolated tier.

89
Q

What’s a container registry?

A

a service that stores and distributes container images and related artifacts. eg, Docker Hub

90
Q

What’s a repository?

A

a collection of container images/other artifacts in a registry that have the same name but different tags.

For example, the following three images are in the acr-helloworld repository:

acr-helloworld:latest
acr-helloworld:v1
acr-helloworld:v2

tag is like version tag at work when deploy.

91
Q

What’s namespace in repository?

A

Repository names can include namespaces. Namespace allow u to identify related repositories/artifact ownership in ur organisation by using forward slash-delimited names

Eg
marketing/campaign10-18/web:v2
marketing/campaign10-18/api:v3

92
Q

What are layer in container images?

A

Container images/artifacts are made up of one or more layers.

For example, in a Docker container image, each layer corresponds to a line in the Dockerfile that defines the image.

NB To provide secure isolation and protection from potential layer manipulation, layers are not shared across registries.

93
Q

What’s a manifest?

A

Each container image or artifact pushed to a container registry is associated with a manifest. The manifest, generated by the registry when the content is pushed, uniquely identifies the artifacts and specifies the layers. JSON file/format

94
Q

In Azure CLI, which command to list the manifests for a repository?

A

az acr manifest list-metadata

eg.
az acr manifest list-metadata –name <repositoryName> --registry <acrName></acrName></repositoryName>

95
Q

How many instances can functions of Consumption and Premium plan scale out?

A

Consumption scale out to 200 instances.

Premium scale out to 100 instances

Setting functionAppScaleLimit to 0 or null means unrestricted

96
Q

What components are required to enable the customer-managed key capability for Azure App Configuration?

A
  1. Standard tier Azure App Configuration instance
  2. Azure Key Vault with soft-delete and purge-protection features enabled
  3. an RSA or RSA-HSM key within the Key Vault (Key Vault Premium tier)
97
Q

What’s Durable Functions?

A

an extension of Azure Functions that lets you write stateful functions in a serverless compute environment.

Define stateful workflows by writing orchestrator functions.
Define stateful entities by writing entity functions using the Azure Functions programming model.

98
Q

What’s the primary use case for Durable Functions?

A

simplifying complex, stateful coordination requirements in serverless applications.

99
Q

What are the typical application patterns that can benefit from Durable Functions?

A
  1. Function chaining
  2. Fan-out/fan-in
  3. Async HTTP APIs
  4. Monitoring
  5. Human interaction
  6. Aggregator (stateful entities)
100
Q

What’s Function chaining?

A

an application pattern where a sequence of functions executes in a specific order.

101
Q

What’s fan out/fan in pattern?

A

The fan-out/fan-in pattern enables multiple functions to be executed in parallel, waiting for all functions to finish. Often, some aggregation work is done on the results that are returned from the functions.

102
Q

What’s the Async HTTP APIs pattern?

A

This application pattern addresses the problem of coordinating the state of long-running operations with external clients.

Common way to implement this pattern; having an HTTP endpoint trigger the long-running action. Then redirect the client to a status endpoint that the client pills to learn when the operation is finished.

103
Q
A

My Az-204 (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions