Fundamentals AZ-900 Microsoft Azure

1 AZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at: 2020 updateMicrosoft Azure Fundamentals foundational level knowledge of cloud services and how those services are provided with Microsoft Azure Microsoft Azure Fundamentals Candidates with non-technical backgrounds Candidates with a technical background who have a need to validate their foundational level knowledge around cloud servicesMicrosoft Azure Fundamentals Describe cloud concepts Describe core Azure services Describe core solutions and management tools Describe general and network security features Describe identity, governance, privacy and Compliance features Describe cost management and SLAYou ll be prepared to take and pass the AZ-900 examBut you don t have to, if you just want to learn cloud conceptsWhat is the Cloud?The ability to rent computing resources - on demandWhat Computing Resources? windows and Linux ServersUnlimited StorageDatabasesQueuesContent Delivery NetworkBatch Processing JobsWhat Computing Resources?

2 Big Data - HadoopMedia ServicesMachine LearningChat BotsCognitive Services1000+ Azure Service optionsAZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at: Cloud Concepts (20-25%)2021 ABenefits of Cloud ComputingBenefitsCost savings - both real and accountingAgilityAvailabilitySecurityGlo bal reachRange of ready on-demand servicesRange of toolsCost SavingsCost Savings - RealEconomies of scaleTotal cost of ownership (TCO) - electricity, Internet, cooling, employeesMicrosoft can run a server cheaper than anyone else with few exceptions4 vCPU server - as low as $187/moYou can take actions to reduce your cost - autoscalingGlobal ReachIt s not possible for most businesses to run data centers in multiple countriesHigh AvailabilityExpressed as a percentage, it s the ability of a system to respond to nines, 4 minutes per monthScalabilityThe ability of a system to handle growth of users or workMax capacityNumber of concurrent usersApp failureElasticityThe ability of a system to automatically grow and shrink based on application demandUserdemandcapacityAgilityThe ability to change rapidly based on changes to market or environmentDisaster RecoveryThe ability of a system to recover from failure within a period of time, and how much data is lostCapital Expenditure (CapEx) and Operational Expenditure (OpEx)CapEx is money invested in assets (like computers)

3 That return investment over timeOpEx is money spent every day on operating expenses Consumption-Based ModelPay per minutePay per hourPay per executionAZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at: Service (IaaS)Virtual machines, networking, load balancers, firewallsPlatform-as-a-Service (PaaS)Upload code packages and have them run, without access to the hardwareSoftware-as-a-Service (SaaS)Access to configuration onlyShared Responsibility ModelServerlessThere are still you just don t ever have to deal with themEven less access to the server than PaaSEven with PaaS, you have to choose an App Service PlanWith PaaS, scaling is your responsibilityServerless means not worrying about choosing the right planServerless means not worrying about scalingServerless means you might pay $0 if you don t use the serviceAzure Serverless OffersCompute - Azure FunctionsCompute - Serverless Kubernetes (Virtual Nodes w/ ACI)Database - Azure SQL Database ServerlessDatabase - Cosmos DB Serverless (preview) AZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at.

4 CloudAzure owns the hardware, on their network and infrastructurePrivate cloudLooks and acts like a cloud, except customer owns or leases or has exclusive access to the hardwareHybrid cloudCombination of public and private clouds; scale private infrastructure to the cloudCompare and ContrastPublic vs private vs hybridAZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at: Core Azure Services (15-20%)2021 ACore Azure architectural componentsRegions60+Regions - not all accessible by everyoneRegion PairsEach region has one other region which is treated as it s pair Almost always in the same geography - data storage lawsThe data connection between region pairs is the highest speed availableSoftware rollouts are deployed to one region of a pair and the other is not touchedIf multiple regions go down, one region of each pair is treated as a priorityWhat are Paired Regions?Example PairsCanadaCanada Central - Canada EastEuropeNorth Europe - West EuropeUSAEast US - West USUSAEast US 2 - Central USUSA North Central US - South Central USBrazil Brazil South - South Central USAvailability ZonesResource GroupsAzure SubscriptionSubscription is a billing unitUsers have access to one or more subscriptions, with different rolesAll resources consumed by a subscription will be billed to the ownerCan be used to organize resources into completely distinct accountsManagement groupsAzure Resource Manager (ARM) Azure ResourcesInstance of services that you create, that are yours to useAZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at.

5 Resources in AzureGetting Deep into the Technical Compute services Networking services Storage services Database services Azure MarketplaceCompute services covered Virtual Machines (VM) App services (Web apps) Azure Container Instances (ACI) Azure Kubernetes Service (AKS) windows Virtual DesktopCompute - Executing code in the cloudVirtual MachinesInfrastructure as a service - IaaSTake an existing machine from your environment into the cloud - a copyWindows or Linux operating systems - several of eachA slice of a physical machine shared with other customersFull control over it, as if it was your machineVirtual Machine TypesOver 200 to choose fromNumber of CPU cores, CPU speed, RAM size, temporary disk size, IOPS, etcApp ServicesA new paradigm for running code in the cloudGive your code and configuration to Azure , and they will run itPromise of performance but no access to hardwarePlatform as a Service (PaaS)ContainersAnother paradigm for running code in the cloudContainers contain everything the app needs to run in a container image Fastest and easiest to deployAzure Container Instance (ACI) - single instance, quickest way to deploy a containerAzure Kubernetes Service (AKS) - runs on a cluster of servers, enterprise-gradeWindows Virtual DesktopDesktop version of windows that runs in the cloudYou software installed, your files - available from anywhereCan even see your desktop on iOS and Android, or from any web browserRuns on AzureNetworking Services CoveredVirtual NetworksVPN GatewayVNet PeeringExpressRouteTypes of Networking Services Connectivity Services Protection Services Delivery Services Monitoring ServicesConnectivityVirtual Network - emulating a physical networkMicrosoft Global Network already exists, so a virtual network is just software configurationVirtual Private Network (VPN)

6 - connecting two networks as if they were on the same network, uses a Network GatewayExpressRoute - high-speed private connection to AzureProtection - Security Section of the CourseDDos Protection - Distributed Denial of Service attack protectionAzure FirewallNetwork Security Groups Private LinkDelivery - Not on the ExamLoad Balancer - distribute traffic evenly between multiple backend serversApplication Gateway - a higher-level of load balancer with an optional firewallContent Delivery Network (CDN) - stores common static files on the edge, closer to the users for (perceived) improved performanceAzure Front Door Service - a load balancer, CDN and firewall all-in-oneMonitoring - Management Tools Section of the CourseNetwork WatcherExpressRoute MonitorAzure MonitorStorage Services CoveredContainer (Blob) StorageDisk StorageFile StorageStorage TiersStorage - one of the foundational technologies on which much is builtContainer (Blob) and File StorageThe Azure Storage accountGeneral Purpose v2 (gpv2) is the most common typeBlobs, Tables *, Queues *, FilesAzure Data Lake Storage Gen2 Cheapest type of storagePay Per GB (~ cents per GB)

7 Many, Many OptionsAccess tiers - Hot, Cool, ArchivePerformance ties - Standard or PremiumLocationRedundancy / ReplicationFailover optionsDisk StorageAzure Virtual Machine DisksManaged DisksReserve capacity in advanceOptimized to virtual hard disksDatabase Services CoveredCosmos DBAzure SQL DatabaseAzure Database for MySQLA zure Database for PostgreSQLSQL Managed InstanceMost sophisticated applications have some type of databaseCosmos DBExtremely fast storageDesigned for modern applications such as mobile video games, social networks, and things requiring thousands of global replicationNoSQL StorageMulti-modalSupports many open-source APIs and protocolsAzure SQL DatabaseRuns on the SQL Server engine underneathRelational DBDatabase as a serviceEasy to replicateEasy to scaleEasy to migrate from SQL Server on-premAzure Database for MySQLM anaged MySQL database Common open-source DBMakes migration to the cloud easier if you rely on this oneWordpress uses itAzure Database for PostgreSQLM anaged PostgreSQL database Open-source DBHas better support for clusters and more complex server setupsMakes migration to the cloud easier if you rely on this oneSQL Managed InstanceMost compatible with existing SQL ServerMinimal code changesFully managed by AzureAlways up-to-dateAzure MarketplaceAZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at.

8 Core Solutions and Management Tools (10-15%)Internet of Things (IoT)IoT Hub IoT CentralAzure Sphere2021 AAzure SphereA platform designed to work with connected devicesIncludes: a secure, silicon chip Sphere OS Cloud-based security servicesBig Data and AnalyticsAzure Synapse Analytics(formerly SQL Data Warehouse)HDInsight Azure Databricks2020 AArtificial Intelligence (AI) Azure Machine LearningCognitive ServicesAzure Bot ServiceAzure Bot ServiceA natural language chatbot serviceA database of frequently-asked questionsA front-end that allows people to ask questionsAnd get answersServerless Azure FunctionsLogic Apps Event grid2020 ADevOps SolutionsAzure DevOpsGitHubGitHub ActionsAzure DevTest Labs2020 AGitHubMicrosoft purchased GitHub in 2018 The most popular place to store your company s source codeHas private and public optionsIntegrates with tools such as Visual StudioBased on the git source control language inventedby Linus Torvalds of Linux fameGitHub ActionsAutomate software workflowsWhat happens once someone checks in changes to code?

9 Possibly includes Continuous Integration (CI)Possibly includes automatic compilation of code to check for errorsPossibly includes running a suite of tests against codeHaving a Web App automatically update when new code is checked inAZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at: ToolsAzure CLIP owerShellAzure PortalAzure Cloud ShellAzure Mobile App2020 AAzure Mobile AppMonitor the health and status of resources from your phoneRun commands; start, stop and restart serversAzure AdvisorARM TemplatesAzure Resource Manager (ARM)The deployment and management service for AzureManagement layer that allows you to create, update, and delete resources called deployments All actions that you take to manage your Azure resources goes through the ARM layerAzure MonitorAzure Service HealthAZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at: General and Network Security Features (10-15%) Azure Security CenterAzure Security CenterUnified infrastructure security management system that monitors and protects your systems inside and outside of Azure Strengthen security Protect against threats Get secure fasterKey VaultCentral, secure repository for your secrets, certificates and keysAzure SentinelWhat is Sentinel?

10 Centralizes all the log files from various resourcesAnalyzes them to detect threatsAllows you to run queries on those logs yourselfInvestigate an incident Orchestration and automation to fix the issuesAzure Dedicated HostsHardware that is dedicated to you and only youYou can reserve a machine and run multiple virtual machines on it (to the machine limit) AZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at: in DepthSecurity Layers Data - virtual network endpoint Application - API Management Compute - Limit Remote Desktop access, windows Update Network - NSG, use of subnets, deny by default Perimeter - DDoS, firewalls Identity & access - Azure AD Physical - Door locks and key cardsNetwork Security Group (NSG) Azure FirewallAzure DDoS ProtectionAZ-900 Microsoft Azure FundamentalsScott Duffy, Instructor 2021 Scott Duffy, get the course for these slides at: Identity, Governance, Privacy, and Compliance Features (20-25%)What is Identity ?