Cloud Architecture Terminologies Flashcards by Luke Schollmeyer

What are the five aspects of cloud architecture terminology

A, S, E, F, D

Availability
Scalability
Elasticity
Fault Tolerance
Disaster Recovery

How well did you know this?

Not at all

Perfectly

_________: Your ability to ensure a service remains available.

Availability

How well did you know this?

Not at all

Perfectly

_____: Your ability to grow or shrink rapidly or unimpeded

Scalability

How well did you know this?

Not at all

Perfectly

The ability to automatically shrink and grow to meet demand

Elasticity

How well did you know this?

Not at all

Perfectly

The ability to prevent a failure

Fault Tolerance

How well did you know this?

Not at all

Perfectly

The ability to recover from a failure

Disaster Recovery

How well did you know this?

Not at all

Perfectly

What is a fundamental aspect of high availability?

No single point of failure

How well did you know this?

Not at all

Perfectly

Types of Scalability

V, H

Vertical scaling

2. Horizontal scaling

How well did you know this?

Not at all

Perfectly

What is it when you add more capacity (more or bigger processors, more or faster storage) to existing infrastucture?

Vertical Scaling (scaling up)

How well did you know this?

Not at all

Perfectly

What is it when you add more of the same infrastructure (e.g. more servers)?

Horizontal Scaling (scaling out)

How well did you know this?

Not at all

Perfectly

Removing more servers of the same size

Scaling in

How well did you know this?

Not at all

Perfectly

Adding more servers of the same size

Scaling out

How well did you know this?

Not at all

Perfectly

What is an example of horizontal scaling on Azure?

Using Azure VM Scale Sets - automatically increase or decrease in response to demand or a defined schedule

How well did you know this?

Not at all

Perfectly

A physical server wholly used by a single customer

Dedicated server

How well did you know this?

Not at all

Perfectly

Five considerations to having a dedicated server

GUOCS

You have to guess your capacity
Upgrading will be slow and expensive
Limited by your operating system
Multiple apps can result in conflicts in resource sharing
You have a guarantee to security and privacy and full utilization of underlying resources.

How well did you know this?

Not at all

Perfectly

This allows you to run multiple ____________ on one machine

Virtual Machines, or VMs

How well did you know this?

Not at all

Perfectly

Software layer that lets you run VMs

Hypervisor

How well did you know this?

Not at all

Perfectly

Five considerations to using a VM

MCOOA

Physical server is used by multiple customers
You pay for a fraction of the server
You overpay for underutilized VM capacity
Limited by the guest operating system you chose
Multiple apps on a single VM can conflict with each other.

How well did you know this?

Not at all

Perfectly

You can run multiple _____ within a VM

Containers

How well did you know this?

Not at all

Perfectly

Software layer that allows you to run multiple containers

Docker daemon

How well did you know this?

Not at all

Perfectly

_________ are known as Serverless Compute

Functions

How well did you know this?

Not at all

Perfectly

Four aspects of functions

C, P, CS

You upload a piece of code and choose the amount of memory and duration
Only responsible for code and data, nothing else
Only pay for when the code is running, VMs only run when there is code to be executed
Cold Starts are a side effect

How well did you know this?

Not at all

Perfectly

This is a grouping of multiple data centers

Region

How well did you know this?

Not at all

Perfectly

Number of Azure regions

58 regions in 140 countries

How well did you know this?

Not at all

Perfectly

A discreet market of two or more regions that preserves data residency and compliance boundaries

Geography

The five Azure geographies | U, G, C, B, M

1. United States 2. Azure Government 3. Canada 4. Brazil 5. Mexico

Each region is _____ with another region 300 miles away

Paired

This is done with paired regions to ensure no outages

Only one region is updated at a time

Some services use paired regions for this

Disaster recovery

Some services use paired regions for this

Disaster recovery

Azure has these to meet compliance or legal reasons

Specialized regions

Name four specialized regions | D, GV, GI, T

1. US DoD Central 2. US Gov Virginia 3. US Gov Iowa 4. Three undisclosed regions

Physical location made up of one or more datacenters

Availability Zone

A region will generally have this many Availability Zones

Three

____ regions do not have support for availability zones

Alternate or other

An availabilty zone in a region has a combination of these two domains (F, U)

1. Fault | 2. Update

Logical grouping of hardware to avoid a single point of failure in an AZ

Fault Domain

_____ domains ensure your resources do not go offline, domains are updated one at a time.

Update domain

Logical grouping of VMs that are different fault/update domains to avoid downtime

Availabilty Sets

Name six Azure compute services | V, C, K, S, F, B

1. Virtual Machines 2. Container Services 3. Kubernetes Services 4. Service Fabric 5. Functions 6. Azure batch

Most common type of compute service

Virtual Machine

Run ______ apps on Azure without provisioning servers or VMs

Azure Container Services

Easy to deploy, manage and scale containerized applications

Azure Kubernetes Service (AKS)

Easy to package, deploy and manage scalable and reliable microservices

Azure Service Fabric

Event-driven, serverless ______ run code with provisioning or managing servers

Azure Functions

plans, manages and schedules your ______ processes across 100+ jobs in parallel

Azure Batch Service

Name eight storage services | B, D, F, Q, T, DB, A, DL

1. Blob 2. Disk 3. File 4. Queue 5. Table 6. Data Box 7. Archive 8. Data Lake

Store very large sized and volume of unstructured files

Blob Storage

Virtual volume, you can choose SSD or HDD

Disk Storage

shared volume you can access like a file server, eg SMB

Azure File Storage

Data store for reliably delivering messages between application

Azure Queue Storage

A NOSQL data store that stores unstructured data without schema

Azure Table Store

Briefcase computer designed to move terabytes or petabytes of storage

Azure Data Box

Storage that allows you to store any volume or structured or unstructured data

Azure Data Lake

Azure Database Services | C, S, M, SV, S, DM, R, T

1. Cosmos DB 2. SQL Server 3. MySQL/Postgres/Maria 4. SQL Server on VMs 5. Synapse 6. Database Migration Service 7. Cache Redis 8. Table Service

Fully managed NOSQL database designed for scale

Cosmos DB

fully managed datawarehouse

Synapse

Migrates database to the cloud

Azure Database Migration Service

frequently used and static data for low latency

Redis

Azure Application Integration Services | N, A, SB, SA, L, AM, Q

1. Azure Notifications Hub 2. API Apps 3. Service Bus 4. Stream Analytics 5. Logic Apps 6. API Management 7. Queue Storage

Sends push notifications to any platform from any back end

Azure Notifications Hub

Quickly build and consume APIs in the cloud. Routes APIs to Azure Services

Azure API Apps

Reliable cloud messaging as a service (MaaS) and simple hybrid integration

Azure Service Bus

Serverless, real-time analytics from the cloud to the edge

Azure Stream Analytics

Schedule, automate and orchestrate tasks, business processes and workflows. Integration with enterprise SaaS and enterprise applications

Azure Logic Apps

Hybrid, multi-cloud management platform for APIs across all environments

Azure API Management

data store for queuing and reliably delivering messages between applications

Azure Queue Storage

Developer and Mobile Tools | SS, AS, VS, X

1. SignalR Service 2. App Service 3. Visual Studio 4. Xamarin

Real-time messaging service (like Pusher)

Azure SignalR Service

Service for deploying and scaling web applications with .NET, node.js, java, python and PHP (like Heroku)

Azure App Service

IDE designed for creating apps for Azure

Visual Studio

Mobile app framework

Xamarin

Azure DevOps Services | B, P, R, TP, A, DL

1. Boards 2. Pipeline 3. Repos 4. Test Plans 5. Artifacts 6. DevTest Labs

Deliver value to your users using proven agile tools to plan, track and discuss work

Azure Boards

Build, test and deploy with CI/CD that works with any language, platform, and cloud. Connects to github or any other git provider

Azure Pipelines

Unlimited, cloud-hosted git repos and collaborate to build better code with pull requests and advanced file management.

Azure Repos

Test and ship too

Azure Test Plans

Create, host and share packages with team and add artifacts to CI/CD pipeline

Azure Artifacts

Dev test environments

Azure DevTest Labs

Allows you to programmatically create Azure resources via JSON template

Azure Resource Manager

library of pre-made ARM templates provided by the community and partners to launch new projects for a variety of stack scenarios

Azure Quickstart

logically isolated section of the Azure Network where you launch your Azure resources. You choose a range of IPs using CIDR Range

Virtual Network (vNet).

range of IP addresses used in a virtual network

CIDR range

subnets need to have a CIDR range ________ than the vNet to represent their portion

smaller

___ subnet can reach the Internet

Public

_____ subnet cannot reach the Internet

Private

Cloud-native Networking Services | D, VN, LB, AG, NSG

1. DNS 2. vNet 3. Load Balancer 4. Application Gateway 5. Network Security Groups.

provides DNS responses and high domain availability

Azure DNS

logical isolated section of the Azure network for customers to launch Azure resources

Azure Virtual Network

OSI Level 4 load balancer

Azure Load Balancer

OSI Level 7 load balancer can apply a web application firewall

Azure Application Gateway

virtual firewall at the subnet level

Network Security Groups

Enterprise/Hybrid Networking Services | FD, ER, VW, C, VNG

1. Front Door 2. Express Route 3. Virtual WAN 4. Connection 5. Virtual Network Gateway

scalable and secure entry point for fast delivery of your global applications

Azure Front Door

connection between your on-premise to Azure cloud

Azure Express Route

networking service for networking, security and routing

Virtual WAN

VPN connection securely connection two Azure local network via IPsec

Azure Connection

site-to-site VPN connection between an Azure virtual network and your local network

Virtual Network Gateway

operates at the DNS layer to direct incoming DNS requests based on the routing method of your choice

Azure Traffic Manager

allows you to host your domains names on Azure

Azure DNS

evenly distributes incoming network traffic across a group of backed resources or servers

Azure Load Balancer

Two configurations for Azure Load Balancer

Public and private

allows you to group together identical VMs and automatically increase or decrease the amount of servers

Scale sets

types of scenarios you set up scale sets | C, S

1. change in CPU, memory, disk and network performance | 2. predefined schedule

network of internet connected objects able to collect and exchange data

IoT Services

lot Services | C, H, E

1. IoT Central 2. IoT Hub 3. IoT Edge

connects your IoT devices to the cloud

IoT Central

Enables secured communication between IoT application and devices it manages

IoT Hub

Allows data processing and analysis nearest the IoT devices

IoT Edge

Big Data and Analytics Services | S, H, D, DLA

1. Synapse 2. HDInsight 3. Databricks 4. Data Lakes Analytics

runs SQL queries against large databases for reporting

Azure Synapse

analytics software for running Hadoop, Kafka and Spark

HDInsights

Spark-based analytics platform

Azure Databricks

On-demand analytics job service that simplifies big data

Data Lake Analytics

AI/ML Services

1. Azure Machine Learning Service | 2. Machine Learning Studio

service that allows you to run pipelines to automate ML workflows

Azure Machine Learning Service

Aspects of Serverless Services | E, A, M

1. Event-driven scale 2. Abstraction of servers 3. micro billing

Serverless Services | F, B, L, E

1. Functions 2. Blob storage 3. Logic Apps 4. Event grid

run small amounts of code as serverless functions in several languages

Azure functions

Serverless object storage.

Blob Storage

build serverless workflows composed of Azure functions

Logic Apps

pub/sub messaging system to allow you to react to events and trigger other cloud services

Event Grid

interactive, authenticated, browser-accessible shell for managing Azure resources

Azure Cloud shell

command line interface for managing Azure resources

Azure CLI

Microsoft Security Development Lifecycle

the SDL is a mandatory MS policy embedding security and privacy in software and culture

Azure Security Policies

AP evalulates resources in Azure by comparing the properties of those resources to business rules (Policy Definitions - described in JSON)

Azure Role-Based Access Control (RBAC) | U, G, SP

1. User - individual with a profile in Azure AD 2. Group - set of users in AAD 3. Service Principal - security identity used by applications or services to access specific Azure resources

RBAC - Scope

``` set of resources that access for the Role Assignment applies to. Management Group - > Subscriptions -> Resource groups -> resources ```

____ allows organizations to take advantage of Microsoft’s unused capacity with significant cost saving

Spot VMs

T/F: Spot VM offers high availability guarantees.

False

Spot VMs are great for ...

workloads that can handle interruptions such as batch processing jobs, dev/test environments, large compute workloads, and more.

Which of the following help you save money by committing to one-year or three-year plans for multiple products?

Azure reservations

A 99.99% VM uptime SLA is offered when ?

two or more VMs are deployed across two or more Availability Zones within an Azure region.

a tool that helps in estimating cost savings resulting from migrating workloads to Azure.

Azure Total Cost Ownership (TCO) Calculator

business metrics to measure availability as part of an SLA agreement

Mean Time to Recover (MTTR) is the average time it takes to restore a component after a failure. Mean Time Between Failures (MTBF) is how long a component can reasonably expect to last between outages.

is the maximum acceptable time an application is unavailable after an incident.

Recovery time objective (RTO)

is the maximum duration of data loss that's acceptable during a disaster.

Recovery point objective (RPO)

PREVIEWS ARE PROVIDED | A, F, Av, S, W

"AS-IS," "WITH ALL FAULTS," AND "AS AVAILABLE," AND ARE EXCLUDED FROM THE SERVICE LEVEL AGREEMENTS AND LIMITED WARRANTY

gives the tenant (that is, consumer or customer) maximum control over cloud resources.

IaaS

Advantages of a private clouds | F, S, S

More flexibility: An organization can customize its cloud environment to meet specific business needs. Improved security: Resources are not shared with others, so higher levels of control and security are possible. High scalability: Private clouds afford the same scalability and efficiency as a public cloud.

Reasons for using private cloud

government agencies, financial institutions, and other midsize to large organizations with business-critical operations seeking enhanced control over their environments.

PaaS features | SL, I, A

Software Licensing - avoid the expense and complexity normally associated with buying and managing software licenses. Infrastructure - tenants do not need to manage underlying application infrastructure, middleware, container orchestrators (such as Kubernetes), development tools, and other resources. Application/Service management - allows developers to focus on building and managing their own applications and services, while the cloud service provider typically manages everything else.

enables systems to continue operating properly in the event of failure or when there are faults within components.

Fault tolerance

__________ application has components running in both Azure and on premises.

A hybrid cloud

Azure has three cloud deployment models

Private cloud Public cloud Hybrid cloud

gives you the tools to plan for, analyze and reduce your spending to maximize your cloud investment.

Cost Management

is a service that assesses your organization's current workloads in on-premises datacenters

Azure Migrate

allows you to mix and match different combinations of Azure services to see an estimate of the costs.

The Azure pricing calculator

is a service that, among other things, identifies virtual machines with low utilization from a CPU or network usage standpoint.

Azure Advisor

allow you to prepay for one-year or three-years of virtual machine or SQL Database compute capacity. Pre-paying will allow you to get a discount on the resources you use.

Azure Reservations

an analytical service that encompasses enterprise data warehousing and big data analytics.

Synapse

Azure Synapse has four components | T, Sp, P, St

Synapse SQL: Complete T-SQL–based analytics SQL Pool SQL On-demand Spark: Deeply integrated Apache Spark Synapse Pipelines: Hybrid data integration Studio: Unified user experience

set of data centers deployed within a latency-defined perimeter and connected through a dedicated regional low-latency network

Region

personalized cloud consultant that helps organizations follow best practices to optimize Azure deployments

Azure Advisor

used to send encrypted traffic between an Azure virtual network and an on-premises location over the public Internet

VPN gateway

VPN gateways can be deployed in __________ for resiliency, scalability, and higher availability in virtual network gateways.

Azure Availability Zones

allows developers/administrators to run and test small pieces of code (called functions) without the worry of managing infrastructure.

Azure functions environment

solution for any scenario that can operate in isolated containers, including simple applications, task automation, and build jobs.

Azure Container Instances

scenarios where full container orchestration is needed, (such as service discovery across multiple containers, automatic scaling, and coordinated application upgrades),

Azure Kubernetes

container that holds related resources for an Azure solution. A resource group can include all the resources for a solution or only the resources to be managed as a group.

Resource group

makes it possible to extend on-premises networks to connect to Azure over a private connection with the help of a connectivity provider

ExpressRoute

enables teams of developers to proactively self-manage virtual machines (VMs) and PaaS resources without waiting for approvals.

Azure DevTest Labs

personalized cloud consultant that helps organizations follow best practices in optimizing their Azure deployments.

Azure Advisor

is an interactive, authenticated, browser-accessible shell for managing Azure resources.

Azure Cloud Shell

is a cloud service that helps schedule, automate, and orchestrate tasks, business processes, and workflows to integrate apps, data, systems, and services across enterprises or organizations.

Azure Logic Apps

simplifies how organizations design and build scalable solutions for app integration, data integration, system integration, enterprise application integration (EAI), and business-to-business (B2B) communication, whether in the cloud, on premises, or both.

Logic Apps

provides a management layer that enables the creation, updating, and deletion of resources in an Azure subscription, which helps to maintain consistency across environments and allows various level of security on groups as well as individual resources in the groups.

Azure Resource Manager (ARM)

Azure managed disks are currently available in four disk types:

Ultra Disk Premium Solid-State Drive (SSD) Standard SSD Standard Hard Disk Drive (HDD)

service tier is a paid service and provides additional mitigation capabilities over the Basic service tier (which is free) that are tuned specifically to Azure virtual network resources.

The Azure Standard DDoS

is a collection of documentation, implementation guidance, best practices, and tools that from Microsoft that is designed to accelerate customer cloud adoption journeys.

The Cloud Adoption Framework

is a managed, full-spectrum, open-source analytics service in the cloud for enterprises.

Azure HDInsight

has several built-in roles that can be assigned to users, groups, service principals, and managed identities. Role assignments can be used to control access to Azure resources.

Azure role-based access control (Azure RBAC)

______________is a cloud platform built on the foundational principles of security, privacy and control, compliance, and transparency. ___________delivers a dedicated cloud that enables government agencies and their partners to transform mission-critical workloads to the cloud.

Azure Government

---------- makes it is possible to designate limited administration roles for the purpose of managing identity tasks in less-privileged roles. Administrators can be assigned to manage users, assign administrative roles, reset user passwords, manage user licenses, and manage domain names.

Azure Active Directory (Azure AD),

enables Microsoft Azure applications and users to store and use several types of secret/key data,

Azure Key Vault

enables a cloud architect or a central information technology group to define a repeatable set of Azure resources that implements and adheres to the organization's standards, patterns, and requirements.

Azure Blueprints

Provides customers and partners with easier access to regulatory compliance information.

Azure Trust Center

is a tool for bringing together signals, making decisions, and enforcing organizational policies.

Azure Conditional Access

is a managed, cloud-based network security service that protects Azure virtual network resources

Azure Firewall

are used to filter network traffic to and from Azure resources in an Azure virtual network (VNet). ________contains security rules that allow or deny inbound network traffic to or outbound network traffic from several types of Azure resources.

Azure network security groups (NSGs)

provides an integrated environment that is especially built for bot development.

Azure Bot Service

is the process of validating that someone is who he or she claims to be.

Authentication

Cloud Architecture Terminologies Flashcards

(182 cards)