Describe Azure compute and networking services Flashcards

1
Q

Azure Virtual Machines

A

-Infrastructure as a Service (IaaS)
-Total control over the operating system and the software
-Supports marketplace and custom images

Best suited for:
-Custom software requiring custom system configuration
-Lift-and-shift scenarios

Can run any application/scenario: Web apps & web services, Databases, Desktop applications, Jumpboxes, Gateways, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Virtual Machine Scale Sets

A

-Infrastructure as a Service (IaaS)
-Set of identical virtual machines
-Built-in auto scaling features
-Designed for manual and auto-scaled workloads like web services,* batch processing, etc.
-Manage and autoscale your VM pool based on customizable metrics, and consistently control and deploy VM updates
-Optimize costs by minimizing the number of unnecessary VM instances
-Increase application uptime by using availability zones and availability sets to automatically distribute VMs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

VM Available Sets

A

Availability sets are designed to ensure that VMs stagger updates and have varied power and network connectivity, preventing you from losing all your VMs with a single network or power failure.

Availability sets do this by grouping VMs in two ways: update domain and fault domain.

-Update domain: The update domain groups VMs that can be rebooted at the same time. This allows you to apply updates while knowing that only one update domain grouping will be offline at a time.

-Fault domain: The fault domain groups your VMs by common power source and network switch. By default, an availability set will split your VMs across up to three fault domains.

Best of all, there’s no additional cost for configuring an availability set. You only pay for the VM instances you create.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Azure Functions (Function Apps)

A

-An event-driven, serverless compute platform that helps you develop more efficiently using the programming language of your choice
-Platform as a Service
-Scales up and down very quickly
-Supports popular languages and frameworks

Two hosting/pricing models:
-Consumption-based plan
-Dedicated plan

-Designed for micro/nano-services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Azure Virtual Desktop

A

Is a desktop and application virtualization service that runs on the cloud. It enables you to use a cloud-hosted version of Windows from any location. Azure Virtual Desktop works across devices and operating systems, and works with apps that you can use to access remote desktops or most modern browsers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Containers

A

-Use host’s operating system
-Emulate operating system (VMs emulate hardware)
-Lightweight (no O/S)

Development Effort:
-Maintenance
-Compute & storage requirements

-Respond quicker to demand changes
-Designed for almost any scenario

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Azure Container Instances

A

-Simplest and fastest way to run a container in Azure
-Platform as a Service
-Serverless Containers

Designed for:
-Small and simple web apps/services
-Background jobs
-Scheduled scripts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Azure Kubernetes Service (AKS)

A

-Open-source container orchestration platform
-Platform as a Service
-Highly scalable and customizable
-Designed for high scale container deployments (anything really!)

AKS can use images (either from a container repo or a public repo) and spread this across nodes (nodes underneath VMs), they are separated and abstracted from you. Kubernetes is managing the deployment of containers across those nodes. Once the deployment is finished, it exposes everything to users or applications through a Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Azure App Service

A

Is a fully managed platform for building, deploying, and scaling web applications.

-Designed as enterprise grade web application service
-Platform as a Service
-Supports multiple programming languages and containers
-Built-in autoscale and load balancing
-High availability with auto-patching

Web App: Azure App Service primarily focuses on hosting web applications, including websites, APIs, and mobile app backends.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Azure Virtual Network

A

-Logically isolated networking components
-Segmented into one or more subnets
-Subnets are discrete sections
-Enable communication of resources with each-other, internet and on-premises
-Scoped to a single region
-VNet peering or VPN Gateway, allow cross region communication
-Isolation, Segmentation, Communication, Filtering, Routing

-Network Security Groups (NSGs) work on both subnet and instance levels.
-SGs can be associated with subnets or individual virtual machine (VM) network interfaces
-Stateful

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Azure Batch

A

Is a compute management platform from Azure that allows for large-scale parallel batch workloads to be run in the cloud. Azure Batch has made the provisioning of many scalable high-performance resources easy and affordable to end-users.

Use cases can thus include:

-Engineering simulations – e.g. running simulations for each machine in parallel
-Deep learning and Monte Carlo simulations – e.g. running models with different multiple parameters looking for the best performance
-ETL – e.g. running a transformation task in parallel
-Image processing and rendering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

VPN Gateway

A

-Connects your on-premises networks to Azure through Site-to-Site VPNs.

-The connectivity is secure and uses the industry-standard protocols Internet Protocol Security (IPsec) and Internet Key Exchange (IKE).

-Point-to-Site VPN lets you connect to your virtual machines on Azure virtual networks from anywhere

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Azure Load Balancer

A

-Even traffic distribution (non-web traffic)
-Supports both inbound and outbound scenarios
-High-availability scenarios
-Both TCP (transmission control protocol) and UDP (user datagram protocol) applications
-Internal and External traffic
-Port Forwarding
-High scale with up to millions of flows

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Application Gateway

A

-Customizable layer 7 load-balancing solution (web traffic)
-Integrated web application firewall
-Redirection
-Support for cookie-based session affinity
-URL Routing
-SSL termination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Azure DNS

A

Is a scalable and highly reliable Domain Name System (DNS) hosting service provided by Microsoft Azure. It allows you to manage and resolve domain names in Azure as well as for external domains.

-DNS-hosted alongside your apps
-Ultra-high availability
-Fast DNS queries
-Quick updates to DNS records
-Support for all common DNS record types
-Private Zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Azure ExpressRoute

A

Is a networking service that provides a private, dedicated, and high-throughput connection between your on-premises data center or network and Azure’s data centers. It offers a more reliable and predictable network experience compared to using the public internet for connecting to Azure services.

-Private Connectivity
-High Bandwidth
-Reliability
-Global Connectivity
-Private Peering and Microsoft Peering
-Security and Compliance
-Quality of Service (QoS)
-Resilience and Redundancy

17
Q

Public Endpoint

A

Is an endpoint that is accessible over the public internet. It allows resources to be accessed by users or services outside of your Azure network, making them reachable from anywhere with an internet connection.

-Often used by web applications, APIs, and load balancers serving traffic to the internet.
-They require appropriate security measures, such as firewalls, Network Security Groups (NSGs), and authentication mechanisms to control and secure access.
-Azure resources with public endpoints typically have a public IP address

18
Q

Private Endpoint

A

Is an endpoint that is accessible only from within your Azure Virtual Network (VNet) or an approved, connected VNet. It provides a more restricted and secure network access option.

-Used for resources that should not be directly accessible from the public internet, such as Azure SQL Database, Azure Storage, or Azure App Service

-When a resource has a private endpoint, it connects directly to a specific service within your VNet, bypassing the public internet. This enhances security by reducing the exposure of the resource to external threats.

-Private endpoints can be associated with private IP addresses, and they do not have a public IP or domain name accessible from the internet.

-Access to private endpoints is controlled through Network Security Groups (NSGs), service endpoints, and other network security measures within your VNet.

19
Q

Content Delivery Network

A

-Offers a global solution for rapidly delivering content
-Save bandwidth and improve responsiveness when encoding or distributing gaming software, firmware updates, and IoT endpoints
-Reduce load times for websites, mobile apps, and streaming media to increase user satisfaction globally
-Minimize latency
-POP (points of presence) with many locations