III. Introduction to Microsoft Azure

Microsoft Azure

__________ is a cloud computing platform with an ever-expanding set of services to help you build solutions that meet your technical goals.

Compute, Storage, Networking, Databases, AI & ML, and IoT

The six core service categories shown in the Azure overview are __________.

VMs, Containers, and Functions

In the Azure overview, the Compute category includes __________.

Blob, Files, Queues, and Tables

In the Azure overview, the Storage category includes __________.

VNet, Load Balancer, DNS, and CDN

In the Azure overview, the Networking category includes __________.

SQL, Cosmos DB, MySQL, and PostgreSQL

In the Azure overview, the Databases category includes __________.

Azure OpenAI, AI Services, and ML

In the Azure overview, the AI & ML category includes __________.

IoT Hub, IoT Central, and Edge Services

In the Azure overview, the IoT category includes __________.

Virtual Machines, Virtual Desktop, Containers, Functions, AI/Machine Learning/IoT services, and Application Hosting

The six Azure compute services listed are __________.

Azure Virtual Machines (VMs)

__________ lets you run virtualized servers in Azure as infrastructure as a service (IaaS).

IaaS (Infrastructure as a Service)

Azure VMs are delivered under which cloud service model?

Operating system (OS)

Azure VMs are a good fit when you need total control over the __________.

Total control over the OS, the ability to run custom software, and custom hosting configurations

Three situations where Azure VMs are a good fit are __________.

Physical server hardware

With Azure VMs, you no longer need to buy and maintain __________.

Patching, updates, and configuration

With an Azure VM (IaaS), the customer still manages __________ inside the VM.

Image (prebuilt image)

A(n) __________ is a template that already includes an operating system and tools such as web hosting components, used to deploy VMs quickly.

Azure Virtual Desktop

__________ is a desktop and application virtualization service in Azure that lets users securely access Windows desktops and apps from many device types and locations.

Remote desktop access

At a fundamentals level, Azure Virtual Desktop is a managed option for __________ where desktops and apps stay in the cloud instead of on local devices.

Operating system

Virtual machines are limited to a single __________ per VM.

Containers (Azure containers)

If you want to run multiple instances of an application on a single host machine, __________ are an excellent choice.

Azure Functions

__________ is an event-driven, serverless compute option that doesn't require maintaining virtual machines or containers.

Event

With Azure Functions, a(n) __________ wakes the function, so resources don't need to stay provisioned when there are no events.

HTTP, Timer, and Queue message

The three example triggers shown for Azure Functions are __________.

API response, Storage write, and Event publish

The three example outputs shown for Azure Functions are __________.

Running

Apps built on VMs or containers must have those resources __________ for the app to function, unlike Azure Functions.

Azure AI services

Use __________ when you need prebuilt AI features exposed through APIs.

Azure AI services

The Azure service category that provides prebuilt APIs for language, speech, and vision features without requiring custom model training is __________.

Azure Machine Learning

Use __________ when you need custom model development and management.

Azure IoT services

Use __________ when your solution centers on connected devices and telemetry.

IoT Hub, IoT Central, and Edge

The Azure IoT services named in the slides are __________.

Azure App Service

__________ lets you build and host web apps, background jobs, mobile back-ends, and RESTful APIs in the programming language of your choice without managing infrastructure.

Virtual Machines

In the application hosting comparison, __________ offers the most control (OS and config control, custom hosting setup, you patch and maintain).

Containers

In the application hosting comparison, __________ offers component isolation, portable deployments, and independent scaling.

App Service

In the application hosting comparison, __________ is a managed platform with autoscale, high availability (HA), and integrated deployment, and requires the least operational effort.

Virtual Machines, Containers, App Service

Application hosting options from more control to less operational effort are ordered __________.

Storage Account

An Azure __________ provides a unique namespace, contains one or more storage services, and is protected by a redundancy option.

3 to 24

An Azure storage account name must be __________ characters long, use lowercase letters and numbers, and be globally unique in Azure.

Blobs, Files, Queues, and Tables

The four storage services contained in an Azure storage account are __________.

.blob and .dfs

The endpoint suffixes for Azure Blob storage and Data Lake in a storage account are __________.

.file

The endpoint suffix for Azure Files is __________.

.queue

The endpoint suffix for Azure Queues is __________.

.table

The endpoint suffix for Azure Tables is __________.

Standard GP v2, Premium Block Blobs, Premium File Shares, and Premium Page Blobs

The four Azure storage account types are __________.

Standard General Purpose v2 (Standard GP v2)

__________ is the recommended default storage account type for most scenarios (blobs, files, queues, and tables).

Blob (+ Data Lake), Queue Storage, Table Storage, and Azure Files

Standard GP v2 supports these services: __________.

LRS, GRS, RA-GRS, ZRS, GZRS, and RA-GZRS

Standard GP v2 supports these redundancy options: __________.

Premium Block Blobs

__________ is the storage account type best for high transaction rates, small objects, or low latency requirements; it supports Blob (+ Data Lake) with LRS and ZRS.

Premium File Shares

__________ is the storage account type best for high-scale or high-performance apps, supporting Azure Files with SMB + NFS, and LRS and ZRS redundancy.

Premium Page Blobs

__________ is the storage account type for page blob workloads (e.g., VM disks), with LRS redundancy only.

Hardware failures, outages, and regional disasters

Azure Storage keeps multiple copies of data to protect against __________.

Availability, durability, and cost

Redundancy choices in Azure Storage determine __________.

Locally Redundant Storage (LRS)

The Azure storage redundancy option that synchronously copies data three times within a single physical data center in the primary region is __________.

11

LRS provides __________ nines of durability (99.999999999%).

Zone-Redundant Storage (ZRS)

The Azure storage redundancy option that copies data synchronously across three availability zones in the primary region is __________.

12

ZRS provides __________ nines of durability.

Geo-Redundant Storage (GRS)

The Azure storage redundancy option that keeps LRS in the primary region and asynchronously replicates to a secondary region (6 total copies across two regions) is __________.

Geo-Zone-Redundant Storage (GZRS)

The Azure storage redundancy option that uses ZRS in the primary region and LRS in the secondary region (6 total copies) is __________.

RA-GRS (Read-Access Geo-Redundant Storage)

The variant of GRS that gives optional read-only access to the secondary region is __________.

RA-GZRS (Read-Access Geo-Zone-Redundant Storage)

The variant of GZRS that gives optional read-only access to the secondary region is __________.

16

GRS, GZRS, RA-GRS, and RA-GZRS all provide __________ nines of durability.

15 minutes

For GRS and GZRS, the RPO (recovery point objective) is under __________.

6

GRS and GZRS keep a total of __________ copies of data across two regions.

Asynchronous

Replication between the primary and secondary regions in GRS and GZRS is __________ (synchronous or asynchronous).

Synchronous

Replication within a data center (LRS) or across zones (ZRS) is __________ (synchronous or asynchronous).

Read + Write

In GRS, the primary region has __________ access mode and the secondary region is read-only only if RA-GRS is used.

LRS (11 nines)

LRS = 11 nines, ZRS = 12 nines, and GRS/GZRS/RA-GRS/RA-GZRS = __________ nines. Which redundancy option has the lowest durability?

Azure Blobs

__________ is a massively scalable object store for text and binary data, and includes support for big data analytics through Data Lake Storage Gen2.

Azure Files

__________ provides managed file shares (via SMB/NFS) for cloud or on-premises deployments.

Azure Queues (Queue Storage)

The Azure storage messaging service designed to store asynchronous messages, for reliable messaging between application components, is __________.

64 KB

Azure Queue messages can be up to __________ each.

Azure Disks

__________ provides block-level storage volumes for Azure VMs and is fully managed by Azure.

Azure Tables

__________ is a NoSQL table option for structured, non-relational data.

SMB and NFS

Azure Files uses which two file share protocols?

Object storage

Azure Blobs is best described as which type of storage: object, file, block, or message?

Block-level storage

Azure Disks is best described as which type of storage: object, file, block, or message?

Azure Migrate (online) and Azure Data Box (physical)

The two Azure data migration options are __________.

Azure Migrate

__________ is the online, real-time migration hub, a single portal to assess and migrate on-premises infrastructure to Azure.

Discovery and assessment, server migration, database migration, web app migration, and ISV tool integration

Azure Migrate supports these migration tasks: __________.

Azure Data Box

__________ is the offline bulk data transfer option where you ship a secure storage device with up to 80 TB capacity.

80 TB

Azure Data Box has a capacity of up to __________.

One-time bulk migration, periodic large uploads, and data export from Azure

Azure Data Box is used for __________.

NIST 800-88r1

Azure Data Box devices are securely wiped using the __________ standard, and shipments have end-to-end tracking in the portal.

Azure Migrate is online; Azure Data Box is physical (offline)

Which migration option is online and which is physical: Azure Migrate or Azure Data Box?

AzCopy, Storage Explorer, and Azure File Sync

The three Azure file movement tools are __________.

AzCopy

__________ is a command-line tool that uploads and downloads files, copies between accounts, does one-way synchronization, and works cross-cloud provider.

One-way (source to destination)

AzCopy syncs in which direction?

Scripted / automated

AzCopy is best suited for __________ tasks.

Azure Storage Explorer

__________ is a graphical (GUI) app for Windows, macOS, and Linux to manage blobs and files, and uses AzCopy on the backend.

Manual upload / download (visual browsing and management)

Storage Explorer's interaction model is __________.

Azure File Sync

__________ is an agent service that provides bi-directional sync, cloud tiering, SMB/NFS/FTPS protocols, and multisite caching.

Bi-directional (automatic)

Azure File Sync syncs in which direction?

Hybrid file server

Azure File Sync is best for __________ scenarios.

AzCopy is command line, Storage Explorer is GUI, Azure File Sync is an agent service

Which file movement tool is command line, which is GUI, and which is an agent service?

Azure Virtual Networking, Azure Virtual Private Networks (VPN), Azure ExpressRoute, and Azure DNS

The four Azure networking services listed are __________.

Virtual Networks (VNet)

Azure __________ and virtual subnets enable Azure resources (VMs, web apps, databases) to communicate with each other, with users on the internet, and with on-premises client computers.

Virtual network (VNet / Virtual Private Cloud)

In cloud networking, a __________ enables a secure, isolated section of a public cloud where users can run resources in a virtualized network defined by custom IP ranges and subnets.

Isolation and segmentation, internet communications, communication between Azure resources, communication with on-premises resources, route network traffic, filter network traffic, and connect virtual networks

The seven key capabilities of Azure virtual networks are __________.

Virtual private network (VPN)

A(n) __________ uses an encrypted tunnel within another network.

Untrusted

VPNs are typically deployed to connect two or more trusted private networks over a(n) __________ network, typically the public internet.

Encrypted

In a VPN, traffic is __________ while traveling over the untrusted network to prevent eavesdropping or other attacks.