Session 5-6 Flashcards
(23 cards)
What is azure storage?
You can use to store files, messages, tables and other types of info
5 types of AZ storage. Explain each
Blob storage - no restrictions on the kind of data it can hold (i.e. ideal for images or docs directly to browser). Highly scalable
Disk storage - Provides disks for VM, apps, and other services
File storage - az files offers fully managed file shares in the cloud
Queue storage - service for storing large # of messages bw apps
Table Storage - stores large amts of structured data
What are the storage tiers?
hot tier
cool tier
archive tier
hot tier
optimized for storing data that is accessed or modified frequently (i.e. images on website)
highest storage costs
lowest access costs
cool tier
optimized for storing data that is infrequently accessed or modified (i.e. customer invoices). data should be stored for 30 days
lower storage costs
higher access costs
Archive tier
optimized for storing data that is rarely accessed or modified (i.e. long term backups)
data should be stored for 180 days
lowest storage costs
highest access costs
___ ensures that your storage account meets its availability and durability targets even in the face of failures
redundancy
Data in the Azure storage is always replicated __ times in the primary region
3
az sstorage offers two options for how your data is replicated in the primary region: ___ and ___-
- locally redundant storage LRS
- zone redundant storage ZRS
Locally redundant storage (LRS)
- replicates ur data 3x within a single data center in the primary region
- lowest cost redundancy option
least durability compared to other options - protects against server rack or drive failures but not disaster that occurs within the data center
Zone redundant storage
- Replicates your Azure Storage data across three Azure data centers in 3 diff availability zones in the primary region.
Geo Redundant storage
- For applications requiring high durability, you can choose to copy the data in your storage account to a secondary region that is hundreds of miles away from the primary region.
- copies your data synchronously three times within a single physical location in the primary region using LRS
- It then copies your data asynchronously to a single physical location in the secondary region (the region pair) using LRS.
Geo-zone-redundant storage
Data in a GZRS storage account is copied across three Azure availability zones in the primary region (similar to ZRS) and is also replicated to a secondary geographic region, using LRS, for protection from regional disasters.
what type of storage would you use to store data like a file server
file storage
what is cold tier storage
optimized for storing data that is infrequently accessed or modified. Stored for min of 90 days. Lower storage costs, higher access costs
What is data box
physical migration service that helps transfer large amount of data in quick, inexpensive way
What can you use to execute code in a serverless environment?
Azure functions
You need to allow resources on two different Azure virtual networks to communicate with each other.
What should you configure?
peering
You can link virtual networks together by using virtual network peering. Peering enables resources in each virtual network to communicate with each other.
What can you use to connect Azure resources, such as Azure SQL databases, to an Azure virtual network?
Service endpoints are used to expose Azure services to a virtual network, providing communication between the two. ExpressRoute is used to connect an on-premises network to Azure. NSGs allow you to configure inbound and outbound rules for virtual networks and virtual machines. Peering allows you to connect virtual networks together.
To which object or level is an Azure role-based access control (RBAC) role applied?
scope
What prevents the accidental change or deletion of a resource
resource lock
What can you use to sync identities from an on-premises Active Directory Domain Services (AD DS) domain to Azure AD?
Azure AD Connect
What can you use to ensure that users authenticate by using multi-factor authentication (MFA) when they attempt to sign in from a specific location?
conditional access