Lesson 4 - Understanding Cloud Services
disaster recovery (DR) site
A backup site that is used to relocate services when the primary data center faces a disaster (such as a fire, a flood, an earthquake, or a terrorist attack).
hosted private cloud
A cloud that is provided by a third-party company but is accessible only by users within a specific organization.
private cloud
A cloud that offers the same features and benefits of the public cloud, but is contained within the corporate network and is controlled by the corporate IT department.
Microsoft Intune
A cloud-based management solution that allows you to manage your computers when they are not inside your corporate network.
hybrid cloud
A cloud-computing environment in which the organization will manage some of the resources in-house and a third-party organization will provide the cloud resources externally.
Microsoft Azure Site Recovery
A software component used to orchestrate protection for virtual machines that are located on on-premises Hyper-V host servers located in the VMM cloud.
public cloud
A web-based service that is hosted outside of your organization.
productivity services
Allow users to work and collaborate. An example is Office 365, which allows users to create and share documents.
Communication as a Service (CaaS)
Allows the deployment of communications services through cloud computing without the need to purchase their own equipment.
Software as a Service (SaaS)
Allows the development and provisioning of software for users, including providing servers on which the software runs on.
Platform as a Service (PaaS)
Allows you to buy, develop, test, deploy, and manage software applications so that the applications can be accessed by users.
Monitoring as a Service (MaaS)
Allows you to monitor software applications so that the correct personnel are notified when it is down or not fully performing as needed.
cloud services
Allows you to move or extend your corporate infrastructure to the cloud.
Microsoft Azure
Formerly known as Windows Azure, it is a cloud-computing platform used for building, deploying, and managing applications and services through a global network of Microsoft-managed datacenters.
Microsoft Intune Service Administrator
Has full access to the Microsoft Intune Administration console and can perform all operations including adding or deleting another Services Administrator account.
virtual machines (VMs)
Multiple virtualized hardware environments
Network as a Service (NaaS)
Offers network services such as network infrastructure/IaaS and communication services/CaaS.
Desktop as a Service (DaaS)
Provides a desktop or work environment to run applications, access emails, or back up data.
storage services
Provides a storage platform for data. By storing data on the cloud, the data can be accessed by any user or device. An example of storage services is Azure Storage.
communications services
Provides communication between users. Examples of communications services include Exchange Online and Lync Online.
Azure Active Directory (Azure AD/AAD)
Provides identity management and access control capabilities for your cloud applications.
search services
Provides search functionality into custom applications. In addition, it can provide a search engine and storage of data that can be accessed on an Application Programming Interface (API). An example is Azure Search.
Infrastructure as a Service (IaaS)
Provides the infrastructure that the cloud runs on, such as servers, switches, routers, storage area networks, firewalls, and other equipment.
Microsoft Azure Fabric Controller (FC)
Responsible for provisioning and monitoring the condition of the Azure compute instances.
hypervisor
Sometimes called a System Center 2012 R2 Virtual Machine Manager (VMM), the hypervisor is responsible for abstracting the computer's physical hardware and creating multiple virtualized hardware environments, called virtual machines (VMs).
System Center 2012 R2/2016 Virtual Machine Manager (VMM)
Sometimes called a hypervisor, it is responsible for abstracting the computer's physical hardware and creating multiple virtualized hardware environments, called virtual machines (VMs).
direct membership
The process of manually adding users or devices from within the Microsoft Intune console. You manually include and exclude specific members from the group.
Mobile Device Management (MDM)
This allows you to deploy polices to secure mobile devices, perform a hardware inventory to mobile devices, distribute applications to mobile devices, or wipe mobile devices.
Microsoft Intune + System Center Configuration Manager
This configuration allows you to manage your computers and mobile devices from the System Center Configuration Manager 2012 R2 console.
Microsoft Intune Cloud + On-Premise Configuration
This configuration integrates Microsoft Intune with your existing Active Directory and Exchange environment. With this configuration, you can discover mobile devices using Exchange ActiveSync, synchronize your user accounts with your Active Directory, and manage your mobile devices through Microsoft Intune.
criteria membership
This involves defining certain types of criteria that Microsoft Intune runs a query against to find users or devices. When it finds users or computers that match the criteria, it dynamically adds them as members to the group. The group automatically updates with members as changes occur.
Microsoft Intune Groups
Used to quickly organize and manage your computers and users, are created and managed in the Groups workspace.
Microsoft Intune Stand-Alone Cloud Configuration
With this configuration, you have to administer your computers and devices through the Administrator console. Although this configuration allows you to create and manage policies, inventory your devices, and upload and publish software, it does not support the discovery of mobile devices.