Azure Fundamentals Flashcards & Memory Notes

On-demand computing services over the network, usually billed for what you use.

Public is a provider's shared cloud. Private is dedicated to one organization. Hybrid connects the two.

You pay for what you use, as an operating expense, instead of a large capital purchase up front.

Vertical makes one resource larger. Horizontal adds more copies of the resource.

The workload keeps running through a failure, often by using more than one availability zone.

You do. Microsoft manages the hardware and the hypervisor.

Microsoft. You manage the application and the data.

You provide the code. The provider runs and scales the servers. Azure Functions is the usual example.

You rent compute, storage, and networking and you manage the operating system. A virtual machine is the Azure example.

A finished application the provider runs. You manage your data and who can use it. Microsoft 365 is the usual example.

A set of datacenters deployed inside a latency-defined perimeter.

A physically separate group of datacenters in a region, with its own power, cooling, and networking.

Two regions in the same geography that Microsoft pairs for platform replication and prioritized recovery.

A separate cloud, such as Azure Government or Azure operated by 21Vianet in China. It is not a normal region you move a resource into.

Management group, subscription, resource group, resource.

A logical container for resources that share a lifecycle. Resources in the group can be in different regions.

A grouping of virtual machines into fault domains and update domains inside one datacenter. It is not an availability zone.

No. You choose one of those placements when you create the virtual machine.

Billing and access. Resources are billed to one subscription.

A scale set grows and shrinks identical virtual machines. An availability set spreads them across fault and update domains.

A size, storage for the disks, and a virtual network.

When it is stopped (deallocated). Stopping it only inside the guest can leave the compute charge in place.

A service that delivers virtualized Windows desktops and apps. It is not a single server virtual machine.

VPN Gateway encrypts a tunnel over the internet. ExpressRoute is a private connection through a provider and does not use the public internet.

A private IP address on your virtual network for a platform service, so clients do not need a public address.

Blob storage. Azure Files is a file share. Disks attach to virtual machines.

Hot, cool, cold, and archive. Archive data is offline until you rehydrate it.

Locally redundant storage keeps copies in one datacenter. Geo-redundant storage adds an asynchronous copy in the paired region.

The cloud directory for users, groups, and application sign-in. Entra Domain Services is the managed domain-join option.

Owner can manage resources and grant access. Contributor can manage resources but cannot grant access.

Who can take an action at a scope. It is not the tool that denies a resource in the wrong region.

Whether a resource is allowed to exist, such as an allowed region or a required tag.

The resource can be read and changed, but not deleted, until someone removes the lock.

No. They are metadata, often used to group cost. They are not a security boundary.

The Azure pricing calculator. Cost Management reviews spend you already have.

A way to apply existing Windows Server or SQL Server licenses so the Azure compute price is lower.

A JSON file that describes Azure resources so you can deploy the same infrastructure again.

Bringing servers and other resources outside Azure into Azure management, including policy and monitoring.

It recommends improvements for reliability, security, performance, cost, and operational excellence.

Service Health reports Azure platform issues and planned maintenance. Azure Monitor collects your metrics, logs, and alerts.