AZ-900 Unit 2 of 8

subscription boundaries

Billing boundary Access control boundary

User hierarchy

Azure Account Subscriptions Resource groups Resources

How Azure Resource Manager works

Azure Resource Manager is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in your Azure account. You use management features like access control, locks, and tags to secure and organize your resources after deployment. When a user sends a request from any of the Azure tools, APIs, or SDKs, Resource Manager receives the request. It authenticates and authorizes the request. Resource Manager sends the request to the Azure service, which takes the requested action. Because all requests are handled through the same API, you see consistent results and capabilities in all the different tools.

Big Data examples

Azure Synapse Analytics - Run analytics at a massive scale by using a cloud-based enterprise data warehouse that takes advantage of massively parallel processing to run complex queries quickly across petabytes of data. Azure HDInsight - Process massive amounts of data with managed clusters of Hadoop clusters in the cloud. Azure Databricks - Integrate this collaborative Apache Spark-based analytics service with other big data services in Azure.

Cloud storage

Includes disks attached to VMs, structured formats, file shares or databases

What is cloud computing?

It's the delivery of computing services over the internet, which is otherwise known as the cloud. These services include servers, storage, databases, networking, software, analytics, and intelligence. Cloud computing offers faster innovation, flexible resources, and economies of scale.

What is the Learn sandbox?

Many of the Learn exercises use a technology called the sandbox, which creates a temporary subscription that's added to your Azure account. This temporary subscription allows you to create Azure resources for the duration of a Learn module. Learn automatically cleans up the temporary resources for you after you've completed the module.

consumption-based model benefits

No upfront costs. No need to purchase and manage costly infrastructure that users might not use to its fullest. The ability to pay for additional resources when they are needed. The ability to stop paying for resources that are no longer needed.

PaaS Disadvantage

Platform limitations. There can be some limitations to a cloud platform that might affect how an application runs. When you're evaluating which PaaS platform is best suited for a workload, be sure to consider any limitations in this area.

SaaS Disadvantage

Software limitations. There can be some limitations to a software application that might affect how users work. Because you're using as-is software, you don't have direct control of features. When you're evaluating which SaaS platform is best suited for a workload, be sure to consider any business needs and software limitations.

Operational Expenditure (OpEx)

Spending money on services or products now, and being billed for them now. You can deduct this expense in the same year you spend it. There is no up-front cost, as you pay for a service or product as you use it.

Important facts about management groups

10,000 management groups can be supported in a single directory. A management group tree can support up to six levels of depth. This limit doesn't include the root level or the subscription level. Each management group and subscription can support only one parent. Each management group can have many children. All subscriptions and management groups are within a single hierarchy in each directory.

Horizontal Scalability

Computing capacity can be increased by adding instances of a resource, such as adding more virtual machines to your configuration.

Deployment model: Private cloud

Computing resources are used exclusively by users from one business or organization. A private cloud can be physically located at your organization's on-site datacenter. It also can be hosted by a third-party service provider. Supported by Azure stack.

Geo-distribution:

Applications and data can be deployed to regional datacenters around the globe, so your customers always have the best performance in their region.

Scalability:

Applications in the cloud can be scaled in two ways, while taking advantage of autoscaling: Vertically: Horizontally:

Capital

money and assets owned by a business to contribute to a particular purpose, such as increasing server capacity or building an application

Operating expenditures

ongoing costs of doing business. Consuming cloud services in a pay-as-you-go model could qualify as an operating expenditure.

Azure regions

A geographical area on the planet that contains at least one but potentially multiple datacenters that are nearby and networked together with a low-latency network. Azure intelligently assigns and controls the resources within each region to ensure workloads are appropriately balanced. Regions are what you use to identify the location for your resources. When you deploy a resource in Azure, you'll choose the region where you want your resource deployed. Some services or VM features are only available in certain regions, such as specific VM sizes or storage types. Some global Azure services that don't require you to select a particular region, such as Azure Active Directory, Azure Traffic Manager, and Azure DNS. Azure has more global regions than any other cloud provider. Provides flexibility to bring applications closer to your users no matter where they are. Global regions provide better scalability and redundancy, and preserve data residency for your services.

Azure resource

A manageable item (resource) that's available through Azure. Virtual machines (VMs), storage accounts, web apps, databases, and virtual networks are all examples of resources.

Resources:

A manageable item that's available through Azure. Virtual machines (VMs), storage accounts, web apps, databases, and virtual networks are examples of resources.

Subscription

A subscription groups together user accounts and the resources that have been created by those user accounts. For each subscription, there are limits or quotas on the amount of resources that you can create and use. Organizations can use subscriptions to manage costs and the resources that are created by users, teams, or projects.

What is App Service?

An HTTP-based service that enables you to build and host many types of web-based solutions without managing infrastructure. For example, you can host web apps, mobile back ends, and RESTful APIs in several supported programming languages. Applications developed in .NET, .NET Core, Java, Ruby, Node.js, PHP, or Python can run in and scale with ease on both Windows- and Linux-based environments.

Azure account

An account can have one subscription or multiple subscriptions that have different billing models and to which you apply different access-management policies. You can use Azure subscriptions to define boundaries around Azure products, services, and resources.

What is Azure Marketplace?

An online store that hosts applications that are certified and optimized to run in Azure. Many types of applications are available, ranging from AI and machine learning to web applications. As you'll see in a couple of minutes, deployments from the store are done via the Azure portal by using a wizard-style user interface. This user interface makes evaluating different solutions easy.

Access control boundary:

Azure applies access-management policies at the subscription level, and you can create separate subscriptions to reflect different organizational structures. An example is that within a business, you have different departments to which you apply distinct Azure subscription policies. This billing model allows you to manage and control access to the resources that users provision with specific subscriptions.

Special Azure regions

Azure has specialized regions that you might want to use when you build out your applications for compliance or legal purposes. US DoD Central, US Gov Virginia, US Gov Iowa and more: These regions are physical and logical network-isolated instances of Azure for U.S. government agencies and partners. These datacenters are operated by screened U.S. personnel and include additional compliance certifications. China East, China North, and more: These regions are available through a unique partnership between Microsoft and 21Vianet, whereby Microsoft doesn't directly maintain the datacenters.

Azure region pairs

Each Azure region is always paired with another region within the same geography (such as US, Europe, or Asia) at least 300 miles away. Allows for the replication of resources (such as VM storage) across a geography that helps reduce the likelihood of interruptions because of events such as natural disasters, civil unrest, power outages, or physical network outages that affect both regions at once. If a region in a pair was affected by a natural disaster, for instance, services would automatically failover to the other region in its region pair. Because the pair of regions is directly connected and far enough apart to be isolated from regional disasters, you can use them to provide reliable services and data redundancy. Some services offer automatic geo-redundant storage by using region pairs.

Azure management groups

Efficiently manage multiple subscriptions (access, policies, and compliance). Provide a level of scope above subscriptions, organized into into containers called management groups and apply your governance conditions to the management groups. All subscriptions within a management group automatically inherit the conditions applied to the management group. Give you enterprise-grade management at a large scale no matter what type of subscriptions you might have. All subscriptions within a single management group must trust the same Azure AD tenant.

Additional Azure subscriptions can be used to separate:

Environments Organizational structures Billing Subscription limits

Azure resource groups

Fundamental element of the Azure platform. A logical container for resources deployed on Azure. Resources consist of anything you create in an Azure subscription like VMs, Azure Application Gateway instances, and Azure Cosmos DB instances. All resources must be in a resource group, and a resource can only be a member of a single resource group. Many resources can be moved between resource groups with some services having specific limitations or requirements to move. Resource groups can't be nested. Before any resource can be provisioned, you need a resource group for it to be placed in.

What are cloud service models?

IaaS PaaS SaaS

Additional advantages of region pairs:

If an extensive Azure outage occurs, one region out of every pair is prioritized to make sure at least one is restored as quickly as possible for applications hosted in that region pair. Planned Azure updates are rolled out to paired regions one region at a time to minimize downtime and risk of application outage. Data continues to reside within the same geography as its pair (except for Brazil South) for tax- and law-enforcement jurisdiction purposes. Having a broadly distributed set of datacenters allows Azure to provide a high guarantee of availability.

Azure resource groups functionality

Logical grouping -By placing resources of similar usage, type, or location in a resource group, you can provide order and organization to resources you create in Azure. Life cycle - Resource groups make it easy to remove a set of resources all at once. If you delete a resource group, all resources contained within it are also deleted. Organizing resources by life cycle can be useful in nonproduction environments, where you might try an experiment and then dispose of it. Authorization - Resource groups are a scope for applying role-based access control (RBAC) permissions. By applying RBAC permissions to a resource group, you can ease administration and limit access to allow only what's needed.

The benefits of using Resource Manager

Manage your infrastructure through declarative templates rather than scripts. A Resource Manager template is a JSON file that defines what you want to deploy to Azure. Deploy, manage, and monitor all the resources for your solution as a group, rather than handling these resources individually. Redeploy your solution throughout the development life cycle and have confidence your resources are deployed in a consistent state. Define the dependencies between resources so they're deployed in the correct order. Apply access control to all services because RBAC is natively integrated into the management platform. Apply tags to resources to logically organize all the resources in your subscription. Clarify your organization's billing by viewing costs for a group of resources that share the same tag.

What is an availability zone?

Physically separate datacenters within an Azure region. Made up of one or more datacenters equipped with independent power, cooling, and networking. Set up to be an isolation boundary. If one zone goes down, the other continues working. Connected through high-speed, private fiber-optic networks. Not every region has support for availability zones. Builds high-availability into your application architecture by co-locating your compute, storage, networking, and data resources within a zone and replicating in other zones. Keep in mind that there could be a cost to duplicating your services and transferring data between zones. Created by using one or more datacenters. There's a minimum of three zones within a single region.

Azure subscription

Provides you with authenticated and authorized access to Azure products and services. It also allows you to provision resources. An Azure subscription is a logical unit of Azure services that links to an Azure account, which is an identity in Azure Active Directory (Azure AD) or in a directory that Azure AD trusts.

Resource groups:

Resources are combined into resource groups, which act as a logical container that holds related resources for an Azure solution. The resource group includes resources that you want to manage as a group. You decide which resources belong in a resource group based on what makes the most sense for your organization.

Subscription limits:

Subscriptions are bound to some hard limitations. For example, the maximum number of Azure ExpressRoute circuits per subscription is 10. Those limits should be considered as you create subscriptions on your account. If there's a need to go over those limits in particular scenarios, you might need additional subscriptions.

Billing boundary:

This subscription type determines how an Azure account is billed for using Azure. You can create multiple subscriptions for different types of billing requirements. Azure generates separate billing reports and invoices for each subscription so that you can organize and manage costs.

Zone-redundant services:

The platform replicates automatically across zones (for example, zone-redundant storage, SQL Database).

management groups

These groups help you manage access, policy, and compliance for multiple subscriptions. All subscriptions in a management group automatically inherit the conditions applied to the management group.

Availability zones fall into two categories:

Zonal services: You pin the resource to a specific zone (for example, VMs, managed disks, IP addresses). Zone-redundant services: The platform replicates automatically across zones (for example, zone-redundant storage, SQL Database).

SaaS Common scenarios

Vendor hosted applications - a SaaS CRM provider, SAP, Office365, etc

consumption-based model

Where end users only pay for the resources that they use. Whatever they use is what they pay for.

Billing:

You might want to create additional subscriptions for billing purposes. Because costs are first aggregated at the subscription level, you might want to create subscriptions to manage and track costs based on your needs. For instance, you might want to create one subscription for your production workloads and another subscription for your development and testing workloads.

Zonal services:

You pin the resource to a specific zone (for example, VMs, managed disks, IP addresses).

Assets

economic resources that can be owned or controlled to produce value. Servers, data lakes, and applications can all be considered assets.

Profit

Although they're rare, some transformations can both increase revenue and decrease costs. This is a profit outcome.

Dev Ops examples

Azure DevOps - Use development collaboration tools such as high-performance pipelines, free private Git repositories, configurable Kanban boards, and extensive automated and cloud-based load testing. Formerly known as Visual Studio Team Services. Azure DevTest Labs - Quickly create on-demand Windows and Linux environments to test or demo applications directly from deployment pipelines.

Azure top-down hierarchy of cloud organization

Azure account Management groups Subscriptions Resource groups Resources Regions

Capital expenses vs. operating expenses

CapEx requires significant up-front financial costs, as well as ongoing maintenance and support expenditures. By contrast, OpEx is a consumption-based model, so Tailwind Traders is only responsible for the cost of the computing resources that it uses.

PaaS: responsibility between a cloud provider and a cloud tenant.

Client manages: Application Data Storage Provider manages: Runtime Middleware O/S Virtualization Servers Storage Networking

Vertical Scalability

Computing capacity can be increased by adding RAM or CPUs to a virtual machine.

SaaS Advantages

Gain access to sophisticated applications Use free client software Access app data from anywhere

PaaS Advantages PaaS provides the same benefits and considerations as IaaS, but there are some additional benefits to be aware of.

No CapEx. Users have no up-front costs. Agility. PaaS is more agile than IaaS, and users don't need to configure servers for running applications. Consumption-based model. Users pay only for what they use, and operate under an OpEx model. Skills. No deep technical skills are required to deploy, use, and gain the benefits of PaaS. Cloud benefits. Users can take advantage of the skills and expertise of the cloud provider to ensure that their workloads are made secure and highly available. In addition, users can gain access to more cutting-edge development tools. They can then apply these tools across an application's lifecycle. Productivity. Users can focus on application development only, because the cloud provider handles all platform management. Working with distributed teams as services is easier because the platform is accessed over the internet. You can make the platform available globally more easily.

IaaS (Infrastructure as a Service)

Provides instant computing infrastructure that you can provision and manage over the Internet. This cloud service model is the closest to managing physical servers. A cloud provider keeps the hardware up to date, but operating system maintenance and network configuration is left to the cloud tenant. For example, Azure virtual machines are fully operational virtual compute devices running in Microsoft's datacenters. An advantage of this cloud service model is rapid deployment of new compute devices. Setting up a new virtual machine is considerably faster than procuring, installing, and configuring a physical server.

PaaS (Platform as a Service)

Provides ready-made development and deployment environments that you can use to deliver your own cloud services. This cloud service model is a managed hosting environment. The cloud provider manages the virtual machines and networking resources, and the cloud tenant deploys their applications into the managed hosting environment. For example, Azure App Services provides a managed hosting environment where developers can upload their web applications without having to deal with the physical hardware and software requirements.

Which cloud deployment model is described in the following scenario? You have two datacenters in your organization. One datacenter has a database that can only reside in one of the datacenters because of a regulatory requirement. You want to access the database from the other datacenter. You create a VPN using a cloud provider to connect the two datacenters.

Public cloud x-Private cloud The VPN is a public cloud resource; however, because the VPN is a private connection between two private datacenters, this is a private cloud deployment. Hybrid cloud

Depreciation

a decrease in the value of an asset over time. More relevant to the capital expense versus operating expense conversation, depreciation is how the costs of an asset are allocated across the periods in which they are used. For example, if you build an application this year but it's expected to have an average shelf life of five years (like most commercial applications), the cost of the development team and the tools required to create and deploy the code base would be depreciated evenly over five years.

IaaS Common scenarios

Website hosting Web apps Storage, backup, and recovery High-performance computing Big data analysis

Captial expenditures

generate benefits over a long period. These expenditures are generally nonrecurring and result in the acquisition of permanent assets. Building an application could qualify as a capital expenditure.

What are the three deployment models for cloud computing?

public cloud private cloud hybrid cloud

Valuation

the process of estimating how much a company is worth. In most industries, valuation is based on the company's ability to generate revenue and profit, while respecting the operating costs required to create the goods that provide that revenue. In some industries, such as retail, or in some transaction types, such as private equity, assets and depreciation can play a large part in the company's valuation.

Capital Expenditure (CapEx)

the up-front spending of money on physical infrastructure, and then deducting that up-front expense over time. The up-front cost from CapEx has a value that reduces over time.

IaaS: responsibility between a cloud provider and a cloud tenant.

Client manages: Application Data Storage Runtime Middleware O/S Provider manages: Virtualization Servers Storage Networking

On-Premises: responsibility between a cloud provider and a cloud tenant.

Client manages: Application Data Storage Runtime Middleware O/S Virtualization Servers Storage Networking

Elasticity:

Cloud-based applications can be configured to always have the resources they need. Agility: Cloud-based resources can be deployed and configured quickly as your application requirements change.

Commonly used Azure services

Compute Networking Storage Mobile Databases Web Internet of Things (IoT) Big data AI DevOps

True or false: You need to purchase an Azure account before you can use any Azure resources.

x - False You can use a free Azure account or a Microsoft Learn sandbox to create resources. True

Which cloud deployment model would be the best match for the following situation? A SQL server database is needed for a short-term project. The IT department does not have available hardware that meets the performance requirements or resources to deploy it. The project starts next week. Once the project is over, the database is no longer needed.

x -Public cloud The need for a quick deployment and the short lifecycle of the SQL database make public cloud the best option. Private cloud Hybrid cloud

Which cloud service model is described in the following scenario? You create several virtual machines in the cloud. The VMs are networked together using a virtual network. The VMs have access to x-ray image files in cloud storage. One virtual machine is a web server that hosts a website exposed to the internet for customers to access their records. There is a VPN that connects the solution to your on-premises datacenter for customer information to display with the image files.

x-IaaS All the resources used in this scenario can be implemented using IaaS. Only part of the solution could be implemented using PaaS, so it would not be a good choice. Since this is a custom solution, we can assume there isn't a SaaS offering that delivers this functionality. PaaS SaaS

Azure Services

1. Compute services 2. Cloud storage 3. Networking 4. App hosting 5. Artificial intelligence 6. Internet of things 7. Integration 8. Security

Web examples To support to build and host web apps and HTTP-based web services

Azure App Service - Quickly create powerful cloud web-based apps. Azure Notification Hubs - Send push notifications to any platform from any back end. Azure API Management - Publish APIs to developers, partners, and employees securely and at scale. Azure Cognitive Search - Deploy this fully managed search as a service. Web Apps feature of Azure App Service - Create and deploy mission-critical web apps at scale. Azure SignalR Service - Add real-time web functionalities easily.

Storage examples Azure provides four main types of storage services.

Azure Blob storage - Storage service for very large objects, such as video files or bitmaps. Azure File storage - File shares that can be accessed and managed like a file server. Azure Queue storage - A data store for queuing and reliably delivering messages between applications. Azure Table storage - A service that stores non-relational structured data (also known as structured NoSQL data) in the cloud, providing a key/attribute store with a schemaless design. Key attributes of all storage services: Durable and highly available with redundancy and replication. Secure through automatic encryption and role-based access control. Scalable with virtually unlimited storage. Managed, handling maintenance and any critical problems for you. Accessible from anywhere in the world over HTTP or HTTPS.

Database examples Multiple database services to store a wide variety of data types and volumes

Azure Cosmos DB-Globally distributed DB that supports NoSQL options. Azure SQL DB -Fully managed relational DB with auto-scale, integral intelligence, and robust security. Azure DB for MySQL - Fully managed and scalable MySQL relational DB with high availability and security. Azure DB for PostgreSQL - Fully managed and scalable PostgreSQL relational DB with high availability and security. SQL Server on Azure Virtual Machines -Service that hosts enterprise SQL Server apps in the cloud. Azure Synapse Analytics-Fully managed data warehouse with integral security at every level of scale at no extra cost. Azure DB Migration Service-Service that migrates DBs to the cloud with no application code changes. Azure Cache for Redis - Fully managed service caches frequently used and static data to reduce data and application latency. Azure DB for MariaDB - Fully managed and scalable MariaDB relational DB with high availability and security.

AI Examples of common AI and machine learning service types in Azure

Azure Machine Learning Service - Cloud-based environment you can use to develop, train, test, deploy, manage, and track machine learning models. It can auto-generate a model and auto-tune it for you. It will let you start training on your local machine, and then scale out to the cloud. Azure ML Studio - Collaborative visual workspace where you can build, test, and deploy machine learning solutions by using prebuilt machine learning algorithms and data-handling modules. A closely related set of products are the cognitive services. You can use these prebuilt APIs in your applications to solve complex problems.

Examples of compute services in Azure

Azure VMs -Windows or Linux virtual machines (VMs) hosted in Azure. Azure VM Scale Sets - Scaling for Windows or Linux VMs hosted in Azure. Azure Kubernetes Service - Cluster management for VMs that run containerized services. Azure Service Fabric - Distributed systems platform that runs in Azure or on-premises. Azure Batch - Managed service for parallel and high-performance computing applications. Azure Container Instances - Containerized apps run on Azure without provisioning servers or VMs. Azure Functions - An event-driven, serverless compute service.

Networking examples Linking compute resources and providing access to applications is the key function of Azure networking.

Azure Virtual Network - Connects VMs to incoming virtual private network (VPN) connections. Azure Load Balancer - Balances inbound and outbound connections to applications or service endpoints. Azure Application Gateway - Optimizes app server farm delivery while increasing application security. Azure VPN Gateway - Accesses Azure Virtual Networks through high-performance VPN gateways. Azure DNS - Provides ultra-fast DNS responses and ultra-high domain availability. Azure Content Delivery Network - Delivers high-bandwidth content to customers globally. Azure DDoS Protection - Protects Azure-hosted applications from distributed denial of service (DDOS) attacks. Azure Traffic Manager - Distributes network traffic across Azure regions worldwide. Azure ExpressRoute - Connects to Azure over high-bandwidth dedicated secure connections. Azure Network Watcher - Monitors and diagnoses network issues by using scenario-based analysis. Azure Firewall - Implements high-security, high-availability firewall with unlimited scalability. Azure Virtual WAN - Creates a unified wide area network (WAN) that connects local and remote sites.

What is Azure?

Azure is a continually expanding set of cloud services that help your organization meet your current and future business challenges. Azure gives you the freedom to build, manage, and deploy applications on a massive global network using your favorite tools and frameworks.

Disaster recovery:

By taking advantage of cloud-based backup services, data replication, and geo-distribution, you can deploy your applications with the confidence that comes from knowing that your data is safe in the event that disaster should occur.

What is Azure Marketplace?

Connects users with Microsoft partners, independent software vendors, and startups that offer their solutions and services, which are optimized to run on Azure. Azure Marketplace customers can find, try, purchase, and provision applications and services from hundreds of leading service providers. All solutions and services are certified to run on Azure. The solution catalog spans several industry categories such as open-source container platforms, virtual machine images, databases, application build and deployment software, developer tools, threat detection, and blockchain. Using Azure Marketplace, you can provision end-to-end solutions quickly and reliably, hosted in your own Azure environment. At the time of writing, there are more than 8,000 listings. Azure Marketplace is designed for IT pros and cloud developers interested in commercial and IT software. Microsoft partners also use it as a launch point for all joint go-to-market activities.

What does Azure offer?

Continuous innovation from Microsoft supports your development today and your product visions for tomorrow. With a commitment to open source, and support for all languages and frameworks, build how you want and deploy where you want to. On-premises, in the cloud, and at the edge--we'll meet you where you are. Integrate and manage your environments with tools and services designed for a hybrid cloud solution. Get security from the ground up, backed by a team of experts, and proactive compliance trusted by enterprises, governments, and startups.

Compute services

Covers VMs, Containers and serverless computing including microservices, performing calculations, executing logic and running applications

Which of the following choices isn't a cloud computing category?

Platform-as-a-Service (PaaS) Networking-as-a-Service (NaaS) NaaS isn't a cloud computing category. Infrastructure-as-a-Service (IaaS) Software-as-a-Service (SaaS)

SaaS (Infrastructure as a Service)

Delivers applications over the Internet as a web-based service. In this cloud service model, the cloud provider manages all aspects of the application environment, such as virtual machines, networking resources, data storage, and applications. The cloud tenant only needs to provide their data to the application managed by the cloud provider. For example, Office 365 provides a fully working version of Office that runs in the cloud. All that you need to do is create your content, and Office 365 takes care of everything else.

Reliability:

Depending on the service-level agreement that you choose, your cloud-based applications can provide a continuous user experience with no apparent downtime even when things go wrong.

PaaS Common scenarios

Development framework Analytics or business intelligence

PaaS resources provided: Only need to manage application software. OS and hardware managed by cloud vendor.

Development tools, database mgmt, business analytics Operating systems Servers and Storage Networking firewalls/security Data center physical plant/building

Which of the following options isn't a type of cloud computing?

Distributed cloud A distributed cloud isn't a valid type of cloud computing. Hybrid cloud Private cloud Public cloud

Iaas Advantages

Eliminates capital expense and reduces ongoing cost Improves business continuity and disaster recovery Respond quicker to shifting business conditions Increase stability, reliability, and supportability

Why hybrid cloud? Examples of why you would use hybrid cloud:

Existing hardware investment: Business reasons require that you use an existing operating environment and hardware. Regulatory requirements: Regulation requires that the data needs to remain at a physical location. Unique operating environment: Public cloud can't replicate a legacy operating environment. Migration: Move workloads to the cloud over time.

Security

Integrated into all aspects of Azure included harden of the structure and global security intelligence monitoring, identity mangement controlling access to services and data.

Internet of Things

Integrates sensors and devices, manage them on IoT hubs, create dashboards and apps to monitor and control assets.

Integration

Integration, logic apps, and service bus connect applications and services - allow for workflows to orchestrate business processes for systems in the cloud or on prem.

IoT examples

IoT Central - Fully managed global IoT software as a service (SaaS) solution that makes it easy to connect, monitor, and manage IoT assets at scale. Azure IoT Hub - Messaging hub that provides secure communications between and monitoring of millions of IoT devices. IoT Edge - Fully managed service that allows data analysis models to be pushed directly onto IoT devices, which allows them to react quickly to state changes without needing to consult cloud-based AI models.

Why is cloud computing typically cheaper to use?

Lower your operating costs. Run your infrastructure more efficiently. Scale as your business needs change.

Which of the following statements is true?

With Operating Expenses (OpEx), you are responsible for purchasing and maintaining your computing resources. With Operating Expenses (OpEx), you are only responsible for the computing resources that you use. With Capital Expenses (CapEx), you are only responsible for the computing resources that you use.

IaaS Advantages IaaS is the most flexible category of cloud services. It aims to give you complete control over the hardware that runs your application. Instead of buying hardware, with IaaS, you rent it.

No CapEx. Users have no up-front costs. Agility. Applications can be made accessible quickly, and deprovisioned whenever needed. Management. The shared responsibility model applies; the user manages and maintains the services they have provisioned, and the cloud provider manages and maintains the cloud infrastructure. Consumption-based model. Organizations pay only for what they use and operate under an Operational Expenditure (OpEx) model. Skills. No deep technical skills are required to deploy, use, and gain the benefits of a public cloud. Organizations can use the skills and expertise of the cloud provider to ensure workloads are secure, safe, and highly available. Cloud benefits. Organizations can use the skills and expertise of the cloud provider to ensure workloads are made secure and highly available. Flexibility. IaaS is the most flexible cloud service because you have control to configure and manage the hardware running your application.

SaaS Advantages SaaS is software that's centrally hosted and managed for you and your users or customers. Usually one version of the application is used for all customers, and it's licensed through a monthly or annual subscription. SaaS provides the same benefits as IaaS, but again there are some additional benefits to be aware of too.

No CapEx. Users have no up-front costs. Agility. Users can provide staff with access to the latest software quickly and easily. Pay-as-you-go pricing model. Users pay for the software they use on a subscription model, typically monthly or yearly, regardless of how much they use the software. Skills. No deep technical skills are required to deploy, use, and gain the benefits of SaaS. Flexibility. Users can access the same application data from anywhere.

Mobile examples To create mobile back-end services for iOS, Android, and Windows apps

Features of this service include: Adding corporate sign-in Connecting to on-premises resources such as SAP, Oracle, SQL Server, and SharePoint Offline data synchronization. Connectivity to on-premises data. Broadcasting push notifications. Autoscaling to match business needs.

SaaS resources provided: Replaces on-device software - no client software. Least control of the platform and management responsibility.

Hosted applications/apps Development tools, database mgmt, business analytics Operating systems Servers and Storage Networking firewalls/security Data center physical plant/building

Which cloud service model would be the best match for the following situation? You work at a start-up company with a small number of employees who need to collaborate. They need email, calendar scheduling, and somewhere to store documents. The team is technical but do not have the time or hardware to implement and manage a solution.

IaaS PaaS x-SaaS A SaaS solution such as Microsoft 365 would be a good solution for the collaboration requirements.

Which cloud service model would be the best match for the following situation? A SQL Server database is needed for a short-term project. The IT department does not have available hardware that meets the performance requirements or resources to deploy it. The project starts next week. Once the project is over, the database is no longer needed.

IaaS x-PaaS Because of the immediate need and short lifetime, PaaS is the best option. For example, you could use Azure SQL Database for the solution. IaaS is not as good of a choice because creating a virtual machine and installing SQL Server would require more time and effort than using a pre-built PaaS offering. SaaS

Which of the following statements is not true about cloud computing?

IaaS, PaaS, and SaaS are examples of cloud computing service models. x -Cloud computing resources are usually limited to specific geographic regions. Most cloud computing resources can be distributed to global datacenters. Cloud computing typically decreases your operating expenses. Three cloud computing deployment models are public cloud, private cloud, and hybrid cloud.

Invoice sections/ Billing profiles:

If you have multiple subscriptions, you can organize them into invoice sections. Each invoice section is a line item on the invoice that shows the charges incurred that month. For example, you might need a single invoice for your organization but want to organize charges by department, team, or project. Depending on your needs, you can set up multiple invoices within the same billing account. To do this, create additional billing profiles. Each billing profile has its own monthly invoice and payment method.

Why should I move to the cloud?

In our ever-changing digital world, two trends emerge: 1. Teams deliver new features to their users at record speeds. 2. Users expect an increasingly rich and immersive experience with their devices and with software. To power your services and deliver innovative and novel user experiences more quickly, the cloud provides on-demand access to: 1. A nearly limitless pool of raw compute, storage, and networking components. 2. Speech recognition and other cognitive services that help make your application stand out from the crowd. 3. Analytics services that deliver telemetry data from your software and devices.

Why private cloud? Examples of why you would use public cloud:

Pre-existing environment: An existing operating environment that can't be replicated in the public cloud. A large investment in hardware and employees with solution expertise. A large organization may choose to commoditize their computing resources. Legacy applications: Business-critical legacy applications that can't easily be physically relocated. Data sovereignty and security: Political borders and legal requirements may dictate where data can physically exist. Regulatory compliance / certification: PCI or HIPAA compliance. Certified on-premises datacenter.

SaaS: responsibility between a cloud provider and a cloud tenant.

Provider manages: Application Data Storage Runtime Middleware O/S Virtualization Servers Storage Networking

Which cloud deployment model is described in the following scenario? You create several virtual machines in the cloud. The VMs are networked together using a virtual network. The VMs have access to x-ray image files in cloud storage. One of the VMs is a web server that host a website exposed to the Internet for customers to access their records. There is a VPN that connects the solution to your on-premises datacenter for customer information to display with the image files.

Public cloud Private cloud x - Hybrid cloud This scenario uses both public and private cloud with a connection between the two. Therefore, it is a hybrid cloud deployment.

PaaS Advantages

Reduced development time Develop for multiple platforms Use sophisticated tools affordably Support geographically distributed development teams Efficiently manage the application lifecycle

What are some cloud computing advantages?

Reliability Scalability: Elasticity: Geo-distribution: Disaster recovery:

Fiscal conversations consist of three basic concepts

Revenue Cost Profit

App host

Run your entire web application on a manage platform in WIndows or Linux or 3rd party solutions including SAP

Artificial intelligence

Runs AI, machine learning and prebuilt cognitive services. Search and analyze existing data to forecast future behaviors, outcomes and trends. makes absent devices smarter.

Which of the following choices isn't a benefit of using cloud services?

Scalability Geographic isolation You can choose to create resources in a single region; however, one of the primary advantages to cloud computing is geographic distribution. Disaster recovery High availability

IaaS resources provided: Most control of the platform and management responsibility.

Servers and Storage Networking firewalls/security Data venter physical plant/building

Why public cloud? Examples of why you would use public cloud:

Service consumption through on-demand or subscription model: The on-demand or subscription model allows you to pay for the portion of CPU, storage, and other resources that you use or reserve. No up-front investment of hardware: No requirement to purchase, manage, and maintain on-premises hardware and application infrastructure. The cloud service provider is held responsible for all management and maintenance of the system. Automation: Quickly provision infrastructure resources using a web portal, scripts, or via automation. Geographic dispersity: Store data near your users, or in desired locations without having to maintain your own datacenters. Reduced hardware maintenance: The service provider is responsible for hardware maintenance.

Deployment model: Public cloud

Services are offered over the public internet and available to anyone who wants to purchase them. Cloud resources like servers and storage are owned and operated by a third-party cloud service provider and delivered over the internet.

Networking features

Set up private connections to on-prem environments to configure and control traffic in and out of Azure efficiently to optimize performance and scalability

What is the Azure free account?

The Azure free account includes: Free access to popular Azure products for 12 months. A credit to spend for the first 30 days. Access to more than 25 products that are always free. The Azure free account is an excellent way for new users to get started and explore. To sign up, you need a phone number, a credit card, and a Microsoft or GitHub account. The credit card information is used for identity verification only. You won't be charged for any services until you upgrade to a paid subscription.

What is the Azure portal?

The Azure portal is a web-based, unified console that provides an alternative to command-line tools. With the Azure portal, you can manage your Azure subscription by using a graphical user interface. You can: Build, manage, and monitor everything from simple web apps to complex cloud deployments. Create custom dashboards for an organized view of resources. Configure accessibility options for an optimal experience.

What is the Azure portal?

The Azure portal is a web-based, unified console that provides an alternative to command-line tools. With the Azure portal, you can manage your Azure subscription by using a graphical user interface. You can: Build, manage, and monitor everything from simple web apps to complex cloud deployments. Create custom dashboards for an organized view of resources. Configure accessibility options for an optimal experience. The Azure portal is designed for resiliency and continuous availability. It maintains a presence in every Azure datacenter. This configuration makes the Azure portal resilient to individual datacenter failures and avoids network slowdowns by being close to users. The Azure portal updates continuously and requires no downtime for maintenance activities.

What is serverless computing?

The cloud service provider automatically provisions, scales, and manages the infrastructure required to run the code. The tasks associated with infrastructure provisioning and management are invisible to the developer.

Deployment model: Hybrid cloud

This computing environment combines a public cloud and a private cloud by allowing data and applications to be shared between them. Used as a migration approach. Used as segmenting to pass data back and forth. Used for cloud bursting, when on-prem datacenter needs additional resources.

True or false: In an IaaS environment, the cloud tenant is responsible for routine hardware maintenance.

True x -False In an IaaS environment, the cloud provider is responsible for any hardware maintenance.

AI Examples of cognitive services. You can use these prebuilt APIs in your applications to solve complex problems.

Vision - Use image-processing algorithms to smartly identify, caption, index, and moderate your pictures and videos. Speech - Convert spoken audio into text, use voice for verification, or add speaker recognition to your app. Knowledge mapping - Map complex information and data to solve tasks such as intelligent recommendations and semantic search. Bing Search - Add Bing Search APIs to your apps and harness the ability to comb billions of webpages, images, videos, and news with a single API call. Natural Language processing - Allow your apps to process natural language with prebuilt scripts, evaluate sentiment, and learn how to recognize what users want.

Cost

Will less money be spent in the creation, marketing, sales, or delivery of goods or services. Cost outcomes -Cost reduction -Cost avoidance -Capital expenses (CapEx) -Operating expenses (OpEx)

Revenue

Will more money come into the business as a result of the sales of goods or services. Revenue outcomes -New revenue streams -Revenue increases -Profit increases