Describe Azure compute and networking services

Active/active

Connections are restored within a few seconds

Active/standby

Java, PHP, Python, or Node.js

All of the above

All of the above

Both A and B

Scale sets

To protect against physical power or networking failure

All of the above

A service for desktop and application virtualization

It provides centralized security management with Azure AD

Containers can run multiple instances of an application on a single host

Azure Container Instances

It allows independent maintenance, scaling, and updating of app components

Azure App Service

Virtual machine (VM)

Azure App Service

Azure Functions

Avoiding the need to configure and maintain software

Virtual machine scale sets

A preconfigured VM with an OS and other software

Route tables

Peering enables resources in each virtual network to communicate with each other.

Policy-based gateways specify statically the IP address of packets that should be encrypted, while route-based gateways use IP routing to determine which tunnel interface to use.

Use route-based VPN gateways for on-premises devices.

Active/standby = Two instances are deployed, with the standby instance automatically assuming responsibility for connections during disruptions. Connections are typically restored within a few seconds for planned maintenance and within 90 seconds for unplanned disruptions. Active/active = Supports the BGP routing protocol. A unique public IP address is assigned to each instance, with separate tunnels created from the on-premises device to each IP address. High availability can be extended by deploying an additional VPN device on-premises.

Active/standby = Connections are interrupted during failover, but typically restored within a few seconds for planned maintenance and within 90 seconds for unplanned disruptions. Active/active = Failover mechanism involves creating separate tunnels from the on-premises device to each IP address of the instances.

Active/standby = Deployed as two instances, even if you only see one VPN gateway resource in Azure. Active/active = Deployed with a unique public IP address assigned to each instance.

Infrastructure as a Service (IaaS) = A service model that provides a virtualized server in the cloud VM Image = A template used to create a VM that may already include an OS and other software Virtual Machine Scale Sets = A feature that allows you to create and manage a group of identical, load-balanced VMs Availability Sets = A feature that groups VMs together to provide high availability, scalability, and redundancy

Total control over the OS = Ability to run custom software Use of custom hosting configurations = Flexibility of virtualization without having to buy and maintain the physical hardware Preconfigured VM image = Ability to create and provision a VM in minutes Grouping of VMs = High availability, scalability, and redundancy

IaaS offering = Need to configure, update, and maintain the software that runs on the VM Customizable software = Total control over the operating system Rapid provisioning with VM image = Ability to create a VM in minutes Grouping of VMs = High availability, scalability, and redundancy

Virtual machine scale sets = Allows you to centrally manage, configure, and update a large number of VMs in minutes Virtual machine availability sets = Designed to ensure that VMs stagger updates and have varied power and network connectivity Update domain = Groups VMs that can be rebooted at the same time Fault domain = Groups your VMs by common power source and network switch

Running applications in the cloud = Virtual Machines Extending your datacenter to the cloud = Virtual Networks Disaster recovery = IaaS-based approach Desktop and application virtualization service = Azure Virtual Desktop

Size = Defined by purpose, number of processor cores, and amount of RAM Storage disks = Can be hard disk drives, solid state drives, etc. Networking = Includes virtual network, public IP address, and port configuration

Virtual machine scale sets = Automatically deploy a load balancer to make sure that your resources are being used efficiently Virtual machine availability sets = Prevents you from losing all your VMs with a single network or power failure Update domain = Allows you to apply updates while knowing that only one update domain grouping will be offline at a time Fault domain = Helps protect against a physical power or networking failure by having VMs in different fault domains

Azure Virtual Desktop = Enables multiple concurrent users on a single VM and provides centralized security management Azure Container Instances = Fastest and simplest way to run a container in Azure without having to manage any virtual machines Azure Container Apps = Allows to incorporate load balancing and scaling in the container management Azure Kubernetes Service = A container orchestration service that manages the lifecycle of containers

Azure Active Directory = Provides centralized security management for users' desktops Multifactor authentication = Secures user sign-ins Role-based access controls = Secures access to data by assigning granular controls to users Data and apps separation from local hardware = Reduces the risk of confidential data being left on a personal device

Containers = A virtualization environment where multiple instances can run on a single physical or virtual host Docker = One of the most popular container engines supported by Azure Microservice architecture = An architecture where solutions are broken into smaller, independent pieces for better maintenance and scalability Container orchestration service = Manages the lifecycle of containers and simplifies fleet management

Azure Virtual Desktop = Desktop as a Service (DaaS) Azure Container Instances = Platform as a Service (PaaS) Azure Container Apps = Platform as a Service (PaaS) Azure Kubernetes Service = Container Orchestration Service

Route tables = Define rules about how traffic should be directed Network security groups = Azure resources that can contain multiple inbound and outbound security rules Network virtual appliances = Specialized VMs that carry out a particular network function User-defined routes (UDR) = Allow you to control the routing tables between subnets within a virtual network or between virtual networks

Site-to-site connection = Connect on-premises datacenters to virtual networks Point-to-site connection = Connect individual devices to virtual networks Network-to-network connection = Connect virtual networks to other virtual networks

Policy-based VPN gateways = Specify statically the IP address of packets that should be encrypted through each tunnel Route-based VPN gateways = IPSec tunnels are modeled as a network interface or virtual tunnel interface

Virtual network peering = Allows two virtual networks to connect directly to each other VPN gateways = Enable connectivity such as site-to-site, point-to-site and network-to-network connections Azure Route Server = Works with Border Gateway Protocol (BGP) to propagate on-premises BGP routes to Azure virtual networks Azure ExpressRoute = Provides a private, dedicated, high-availability network connection to Microsoft's cloud services

Azure Functions = Event-driven, serverless compute option that scales automatically based on demand Durable Functions = Stateful functions in Azure that pass a context to track prior activity Azure App Service = HTTP-based service for hosting web applications, REST APIs, and mobile back ends Azure App Service WebJobs = Background task runner in Azure App Service

Azure Functions = Ideal for work that can be completed quickly, within seconds or less, in response to an event Azure App Service = Hosting web-oriented applications with automatic scaling and high availability Durable Functions = Used when state needs to be maintained across function executions Azure App Service WebJobs = Running background tasks in an Azure App Service environment

Web apps = Supports hosting web apps using various programming languages API apps = Allows building REST-based web APIs with full Swagger support WebJobs = Enables running background tasks in an Azure App Service environment Mobile apps = Used for building mobile backends

Automatic scaling = Ability to handle varying demand by adjusting resources High availability = Built-in load balancing and traffic manager Continuous deployment model = Automated deployments from GitHub, Azure DevOps, or any Git repo Support for multiple languages = Supports .NET, .NET Core, Java, Ruby, Node.js, PHP, or Python

WebJobs = Runs a program or script in the same context as a web app, API app, or mobile app Mobile Apps = Quickly builds a back end for iOS and Android apps Azure virtual networking = Enables Azure resources to communicate with each other, with users on the internet, and with on-premises client computers Service endpoints = Connects to other Azure resource types, such as Azure SQL databases and storage accounts

Isolation and segmentation = Allows creation of multiple isolated virtual networks Internet communications = Enables incoming connections from the internet by assigning a public IP address to an Azure resource Communicate between Azure resources = Enables Azure resources to communicate securely with each other Communicate with on-premises resources = Links resources together in your on-premises environment and within your Azure subscription

Point-to-site virtual private network connections = From a computer outside your organization back into your corporate network Site-to-site virtual private networks = Links your on-premises VPN device or gateway to the Azure VPN gateway in a virtual network Azure ExpressRoute = Provides a dedicated private connectivity to Azure that doesn't travel over the internet

Azure virtual networks = Provide isolation and segmentation, internet communications, communication between Azure resources, communication with on-premises resources, route network traffic, filter network traffic, connect virtual networks Public endpoints = Have a public IP address and can be accessed from anywhere in the world Private endpoints = Exist within a virtual network and have a private IP address from within the address space of that virtual network Azure resources = Can be linked to virtual networks to improve security and provide optimal routing between resources

Configuring a VPN gateway as a secure failover path

To physically and logically separate gateways within a region

To extend on-premises networks into the Microsoft cloud

Customizable virtual networks

Alias records

Azure Resource Manager

REST API and SDKs

Lower security

To exchange data across on-premises sites without using the public internet

Any-to-any connection

Data is not exposed to potential risks associated with internet communications

False

True

True

False

True

True

True

True

True

True

True