whom the resources and resource group is billed to how you manage resource groups for billing

organization of subscriptions set governance (access, policies, and compliance) and this level

Describe Azure Architecture & Services Flashcards by Jonathan Woolridge

Region Definition

Multiple availability zones in close proximity geographically with low latency between them

How well did you know this?

Not at all

Perfectly

Region Pairs

(def & 3 advantages)

region pairing within the same geography: replication of resources and fault tolerance redundancy

outage backup
minimizing downtime during updates
same geography (tax & regulatory concerns)
lowest latency between regions

How well did you know this?

Not at all

Perfectly

Soverign Region

Exclusive public region region not available to everyone

ex. China, US gov, DoD

How well did you know this?

Not at all

Perfectly

Availability Zones

physically seperate data centers within a region, designed for hardware fault tolerance

(independant power, cooling, networking)

How well did you know this?

Not at all

Perfectly

Resource Group

(def & 3 rules)

container to manage the reasources needed for an application to run
rules:
1. resource can only be aligned to one group
2. can be moved across different regions
3. application can have more than one resource group
example resources:
- metering & billing
- policies
- monitoring & alerts
- quotas
- access control

How well did you know this?

Not at all

Perfectly

Subscription

whom the resources and resource group is billed to
how you manage resource groups for billing

How well did you know this?

Not at all

Perfectly

Management Groups

organization of subscriptions
set governance (access, policies, and compliance) and this level

How well did you know this?

Not at all

Perfectly

Computing Services (6)

Virtual Machine
VM Scale Sets
App Services (web app)
Container Instances
Kubernetes Services
Windows Virtual Desktops

How well did you know this?

Not at all

Perfectly

Virtual Machine Definition

Virtual Machine: emulation of a computer, running on a server in one or more datacenters.

How well did you know this?

Not at all

Perfectly

VM Scale Sets Definition

availability set note as well

2+ virtual machines running exact same code
autoscaling
load balancer: manages traffic

availability set: stagger updates, varied network and power to prevent single point of failure

How well did you know this?

Not at all

Perfectly

App Services Definition

code without access to the hardware or compute (OS)
application hosting

How well did you know this?

Not at all

Perfectly

Azure Containers

2 types

Container Instances: single instance
Kubernetes: cluster of containers, needs a cluster of machines

for development, testing apps (PaaS)

How well did you know this?

Not at all

Perfectly

Windows Virtual Desktop

MS 365: windows in the cloud

How well did you know this?

Not at all

Perfectly

Azure Functions

event driven, serverless computing

How well did you know this?

Not at all

Perfectly

Azure Networking Services

(4)

Virtual Networks
VPN Gateway
VNet Peering
ExpressRoute

How well did you know this?

Not at all

Perfectly

Virtual Private Network

connect two networks as-if its the same network (home to office network)
network gateway

ExpressRoute

connect your private network to azure (no data over public internet)

Subnet

subdivision of a virutal network with its own security rules

Azure DNS

Azure Domain System Name is hosting service for websites

Azure Storage Options

4 types

Blob
Disk
File
Queues

Blob Storage Types

General Purpose: hanlde all types of data
Data Lake Gen2 (block blob): data analytics

Blob Storage Tiers

3 types - 2 rules

hot: frequent access
cold: infequenty, but last at least 30 days
archive: rarely accessed sotred for at least 180 days

rules:
1. only hot and cold can be set at account level
2. archive is set at the blob level

File Storage Definition

think share drive

Queue Storage

storage a large number of messages

Redundancy Options | 5 types

1. Local 2. Geo 3. Zone 4. Geo-Zone 5. Read Access Geo/Geo Zone

Local & Geo Redundancy

local: single datacenter (availability zone) geo: single data center multiple regions

Zone and Geo-Zone Redundancy

zone: multiple datacenters (availability zones) within region geo-zone: zone storage + single datacenter in 2nd region

read-access redundancies | (2 types)

read-access geo: read-access in 2nd region read-access geo-zone: read-access version of geo-zone

standard vs. premium redendancy

standard: get all 4 types of storage redundancy premium: only get local and zone, becuase premium is designed for low latency (data lake gen2, page, file,

Azure Migrate Tools | 6 types

1. discovery & assement: assess on prem 2. server migration: VM migration 3. migration assistane: used for SQL server 4. database servies: on-prem databases (more general) 5. web app assistant: website migration 6. data box: large data migration, pyhsical devices (max 80 terabytes)

AzCopy Definition

command line utility to copy files from storage account

File Sync Definition

bi-directional syncing of local server data to Azure

definition of identity within Azure | what 3 things can identity refer to

1. person 2. applications 3. devices

Azure Active Directory (AAD) Model | what are the authentication steps

1. credentials to aad (identity provider in the visual) 2. signed token back to user 3. signed token then goes to server 4. aad sends a tust, key to server for verification

Azure Activite Directory Domain Services (AAD DS)

stores centralized directory information and lets users and domains communicate

Azure External Identities

* allows you to securely interact with users outside of your organizations * examples: consumer facing apps, corporate identity on social media

Azure Conditional Access | defintion and conditions

only allow access to resources based on conditions (signals) 1. user location 2. device being used 3. who is the user

Zero Trust Model | what does it require - 3 principles

requires authentication to each resource or from any device three principals: 1. verify explicitly 2. least privilege access 3. assume breach