Azure Fundamentals training (Quick Notes)

I’ve been spending some time revising for the Azure Fundamentals course. Here is a quick list of some of the  more problematic test questions I’ve come across

Azure Advisor

• Detects threats and vulnerabilities
• Ensures Fault Tolerance
• Helps reduce spending
• Protects data from accidental deletions
• Speeds up your apps

Application Gateway

Multiple instances of a web application are created across three availability Zones. The company also configures a networking product to evenly distribute service requests based on 3 different URL’s

Application insights

• Feature of Azure monitor
• Visually analyse telemetry data

ATP (Azure threat Protection)

• Pass the ticket – Attacker stealing KERBEROS data
• Pass the hash – Attacker stealing NTLM data
• Suspected Brute Force attack – Multiple attempts to guess a users password

Compliance

http://servicetrust.microsoft.com – Compliance manager URL

• Audit Reports – Service is within the trust Portal to determine Azure Compliance with GDPR
• Compliance manager – Determines whether or not your services meet industry standards
• GDPR – Standards enforced by a government Agency
• Germany – Country with a dedicated trustee for customer data.
  • Physically isolated instance of Azure
• Azure government – Only available in the US
• ISO- International Standards based on non reg agency
• NIST – Standard based none reg agency based in the United States
  • National Institute of Standards and technology

Cloud Shell, CLI and Powershell

Azure CLI

• Az login
• Cross platform command based line tool

Azure Cloud Shell

• New-AzureRmVM
• Web based tool after you log onto the Azure portal

Azure Powershell

• Connect -AzureRMAccount
• Use when you need to log into Azure without opening a web browser

Azure Governance

• Locks – Prevent users from deleting resources
• Advisor – Use information from the Security center to best practices
• Initiatives – Define a set of policies

Cloud Computing terms

• Fault Tolerance – Power Outage in a data center. Automatic Failover for continual operation
• High Availability – Having data available when you need it

Fault tolerance and High Availability are both good for the scenario when you are moving on premise data centers to the cloud. The data is mission critical, there is a need for access to the data sources at all times. Changes are incremental and easy to predict.

• Elasticity – Sudden spikes in traffic
• Scalable – Increase the Number of VMs easily

Azure Locks

• Multiple Locks applied to different scopes. The most restrictive lock is applied
• The lock applies to all resources contained in a scope and any new resources added to the scope

Networking

• NSG – Network Security Group. Inbound traffic for a virtual machine from specified IP addresses
• DDoS- Distributed Denial of Service Prevents a flood of HTTP traffic to a VN that hosts IIS
• Firewall – Create a rule that restricts network traffic

RBAC

Limit Access to Resources at the resource groups and resource Scope

Service Health

• Notifies if App service usage exceeds the usage quota
• Respond to planned Service outages
• Implement a web hook to display health incidents