Microsoft Azure Fundamentals

Azure Log Analytics collects data from various sources and visualizes it from on-premises and the cloud.

• Azure Events Hub: the concept of Event Hub is related to Data and Analytics; it is a large-scale telemetry ingestion that allows you to run millions of events per second, and can be used to load a large amount of data into the cloud in real-time; It captures data into the Azure Blob or Data Lake; publishers send it to the event hub. From these hubs, the consumer reads data.
• Azure Monitor is one of the Monitoring and Management services: provides basic monitoring of Azure resources, helping you understand how your applications work and recognize challenges and tools that impact them proactively; it permits to monitor metrics, activity logs, and diagnostic logss a basic service.
• Azure Analysis Service is an analytic engine as a service for enterprise-grade. It uses advanced computing and mashup to combine data from several data sources, set metrics, and secure data in an advanced single table of the semantic data model for query purposes. The data model makes searching vast volumes of data for ad hoc data
  analysis easier and quicker for users.

Azure virtual machine scale sets allow you to create and manage a pool of identical load-balanced VMs. The number of VM instances will automatically increase or decrease in response to a demand or a given schedule. Scale sets make your applications highly accessible and allow you to manage, configure and upgrade many VMs centrally.

Azure Virtual Desktop is a cloud-based desktop and application virtualization service. It allows your users to access a cloudhosted version of Windows from anywhere. Windows, Mac, iOS, Android, and Linux are all supported by Azure Virtual Desktop. It is compatible with apps that let you access distant desktops and apps. Most recent browsers can also be used to access Azure Virtual Desktop-hosted experiences.

VMs are Linux and Windows VM on-demand with your desired configuration hosted in Azure. It is an IaaS resource.

Regions are geographical areas where Azure is present to deploy the Azure resources. It is a set of data centers with a latency-defined
perimeter connected via a dedicated regional low-latency network.

API is an Application Programming Interface that hosts your data backend services and does not have a graphical user interface, i.e., no user interface, no front end.

A company's data is distributed in Azure and on-premises infrastructure to make it a hybrid solution. A specific VNet gateway called a VPN gateway is used to connect the two. VPN gateway is responsible for creating encrypted communication within the hybrid cloud architecture.

Azure Container Instances is the simplest and fastest way to run an Azure container without managing any virtual machines and following a higher-level service.

Containers are the preferred way for cloud applications to be packaged, deployed, and managed.

Express route is one of the azure services capable of providing a private and secure connection between azure and on-premises networks that provide a more secure and reliable connection. This route comprises a circuit and provides two types of connectivity: primary and secondary.

Consumption-based pricing is based on the usage of resources and is not time-based. It is not limited to free accounts, and the services are
not necessarily consumed all the time.

Azure PowerShell is a shell with which developers, DevOps, and IT professionals can perform commands called cmdlets (pronounced commandlets). These commands call the Azure Rest API to deliver every conceivable management job in Azure. Cmdlets can be performed independently or merged into a script file and executed together to orchestrate:

• The routine setup, teardown, and management of a single resource or various connected resources
• The deployment of a complete infrastructure, which might include dozens or hundreds of resources from imperative code

Capturing commands in a script makes the method repeatable and automatable.

Most Azure features for PowerShell are made up of cmdlets. This simplifies the interaction with Azure resources to be consistent and
efficient. It is a small, lightweight group of commands to perform actions.

Virtual machines are an IaaS offering where you can manage the entire machine.

Content Delivery Network (CDN) provides networking services, which can lead to network failure. CDN proves reliable to its end users, but when it stops working due to technical issues, it cannot get any information from the server side.

CDN can provide information like images, dynamic changes of video, or website content that is regularly changing. Users can experience good performance and access the resources more quickly.

A simple VNet must consist of a virtual machine (one or more than one), an internet resource, and an on-premises network. VNet can provide secure connections using gateways.

In Azure Storage, you can build a storage account for up to 500 TB of cloud data because it has a limit of 500TB per storage account.

In CLI, command changes rarely, so you can automate the commands for future purposes.

Azure networking provides the connectivity between Azure resources and the on-premises network.

The main purpose of creating a subnet is to make multiple networks within the same VNet. With multiple subnets, two or more VMs are developed within the subnet. Such a subnet is called a gateway subnet, and a virtual network gateway is used to connect these gateway subnets.

Resource Manager Template is a JavaScript Object Notation (JSON) file that defines the resources deployed in the resource group. It also
defines the dependencies between the deployed resources. With this template, resources can be deployed in a consistent and repeatable way.

Concerning Azure, compute is a term that covers any services enabling computation in the cloud.

Azure provides three types of app services. Web Apps, Web Apps for Containers, and API Apps cover a specific use case. App Services can all run on Linux, but it is not a particular type of service. Event Grid is a separate service on Azure.

Azure load balancer and application gateway can distribute the traffic load among the service.

Azure Functions is an easy way to run small pieces of code or "functions" in the cloud. A user can create and upload code serverless and then define the triggers or events to execute the code. Triggers may come from various sources, including another user's application or cloud services, such as databases, events, and hubs for notification.

Azure App Service is a fully managed Platform as a Service (PaaS), meaning servers, networks, storage, and other fundamental infrastructures are all managed and controlled by Azure.

Azure App Service is a fully managed Platform as a Service (PaaS). This means servers, networks, storage, and other fundamental infrastructures are all managed and controlled by Azure; you have to focus on business values and logic.

There are two subscription boundaries.

• Billing boundary - How an Azure account is billed for utilizing Azure is determined by this subscription type. For different types of billing requirements, you can create several subscriptions. To help you organize and manage your costs, Azure creates distinct billing reports and invoices for each subscription.
• Access Control Boundary - Azure's access-management policies are applied at the subscription level, and you can build several subscriptions to suit different corporate structures. Within a company, you could have several departments to which you apply different Azure subscription policies. This payment approach enables you to manage and control access to users' resources through subscriptions.

Azure charges for Virtual Machines hourly and the resources you used. You also pay more per hour if you use more CPUs and RAMs on your VMs.

The load balancer belongs to layer 4. It has multiple virtual IP addresses to route TCP/UDP traffic. It is also responsible for connecting the virtual network and on-premises. The application gateway is an advanced load balancer that provides gateway services to the application layer. It is responsible for routing traffic to specific applications like web apps. Application gateway secures application services using firewalls.

An interactive browser, accessible shell for managing Azure resources, Azure Cloud Shell, is accessible by a browser. The shell experience is the best option, whether you work with Bash or PowerShell, as it offers flexibility.

IaaS is the backbone of cloud computing; in some way, all Azure services depend on IaaS. IaaS Azure services must never be purchased
in advance but may be used as required.

It is considered the most advanced load balancer that enables the balancing of web traffic to manage web applications using an HTTP request. Because of its services, the gateway is called the layer 7 load balancer within Microsoft Azure.

CapEx refers to expenditures made to maintain or acquire fixed assets like land and equipment.

Two sorts of costs should be considered when contrasting IT infrastructure
options. Operations Expenditures (OpEx) and Capital Expenditures (CapEx)
CapEx often involves a one-time, upfront expense to acquire or secure
tangible resources. It includes constructing a new building, repaving the
parking lot, constructing a data center, or purchasing a corporate vehicle.
OpEx, on the other hand, involves a one-time purchase of goods or services.
It can be used to pay for convention center rentals, company car leases, and
cloud service contracts.
Due to its consumption-based business model, cloud computing falls under
OpEx. You do not pay for the physical infrastructure, electricity, security, or
any other costs related to running a data center when you use cloud
computing. Rather, you are charged for the IT resources you employ. You do
not have to pay for any IT resources for the month if you do not use any.

You can get authenticated and authorized access to Azure services with an Azure subscription. It also enables you to allocate resources. An
Azure subscription is a logical unit of Azure services linked to an Azure account, which is an Azure Active Directory (Azure AD) or a
directory that Azure AD trusts identity in.

Azure Kubernetes Service cluster architecture is based on Node, Node pools, Node selector, and Pods.

The attributes of VNet, while being created in the Azure portal, define a way to improve network performance and provide scalable service from the designed network. These attributes include address space, public IP address, location, and subnet.

Easy to create and manage multiple VMs

• Maintaining a consistent configuration across your environment is important when multiple VMs are operating your application. The VM
  size, disk configuration, and device configurations should be the same across all VMs for the reliable performance of your application
• All VM instances are created from the same base OS image and configuration in the scale set. This approach allows you to easily control
  hundreds of VMs without additional network management or configuration tasks
• Scale sets allow the Azure load balancer for basic layer-4 traffic distribution and Azure Application Gateway for further advanced layer-7
  traffic distribution and SSL termination.

It is a cloud-based identity and access management service in Azure. It is one of the core services of Azure. This cloud-based IAM service
allows users to sign in and access internal or external resources.

Azure Resource Manager gives you the tools to organize and secure your resources. It is a fundamental service used to install and manage
Azure resources. It has a management layer enables you to create, upgrade, and delete Azure subscription tools. After deployment, you
use management tools like access control, locks, and tags to keep your resources safe and organized.

Containers are the preferred way for cloud applications to be packaged, deployed, and managed.

This way, you get high availability for your servers by replacing the failed server instantly with the new one. HA depends on the number of
VM you set up to cover in case one goes down.

Concerning Azure, compute is a term that covers many services in Azure, enabling computation in the cloud.

VPN gateway provides secure connectivity between the azure and on-premises network. A VPN gateway is made up of a VNet gateway and a virtual private network.

VPN gateway provides secure connectivity between Azure and on-premises networks. A VPN gateway comprises a VNet gateway and a virtual private network.

RDP file is a text file consisting of name/value pairs that define the RDP clients' connection to the remote computer using RDP.

In Azure, this is called Scalability, which means adding or removing resources easily and quickly as per demand. It is important in such
situations where you do not know the amount of the needed resources.

Azure Functions is a great solution for data processing, systems integration, internet-of-things (IoT) work, and simple APIs and microservices development.

Availability Zones are locations within an Azure region that are physically separate. It comprises one or more independently operating
power and network data centers.

Capital Expenditure (CapEx) is the expenditure to maintain or acquire fixed assets by spending money. This includes land, equipment, etc. Operational Expenditure (OpEx) is the cost of a product or a system that is running on a day-to-day basis, like electricity, printer papers, etc.

Azure CDN places the data replicas at the data center closest to the user side. The data center present closest to the users is called the edge node, which contains a cache of files that provides the edge of the internet to users.

The limitation of a free Azure Account is that you get free services for 12 months, with credit expiring after 30 days.

Azure ExpressRoute provides global connectivity to all regions with high availability, better security, and reliability.

You can use the Azure portal with any form of subscription to access all generally available Azure products and services

Azure portal is the console of Microsoft Azure, providing numerous features, services, and a way to create networks with multiple Azure resources and services. It gives GUI representation for the customer to use Azure services. It provides constant availability for using these services.

Function Service belongs to the Serverless cloud service model.

Azure Functions is a serverless computing service that is hosted on the public cloud of Microsoft Azure.

PaaS is designed to facilitate the fast development of web or mobile apps for developers without the need to take concern over the setting or maintaining the underlying server, storage, network, and database infrastructure needed for development.

Using the Azure portal, a VNet should first be created; once the VNet has been deployed, the next step is to add some resources from the resource group to VNet present in the Azure portal. The resources can be added as long as there is space available in the address space, and each resource should have a unique IP address.

Each region has a minimum of three zones.

Azure load balancer provides the load-balancing feature to the connected virtual machines within Microsoft Azure. It manages the network traffic load and enables all VMs to process.

Site-to-Site VPN or S2S provides a way to connect your onpremises network to the Azure virtual network. This type of connection requires a VPN device on-premises with an externally facing IP address. A secure connection called a tunnel enables multiple encrypted connections for security purposes.

VPN gateway is useful for establishing a private connection between Azure resources and an on-premises environment, office, the cloud, or other premises within the cloud in order to establish a secure private connection.

Each virtual machine has hardware, including CPUs, memory, hard drives, network interfaces, and other devices. The virtual hardware is then mapped to the actual hardware on the physical computer, which saves costs by reducing the need for physical hardware systems and related maintenance costs, and the power and cooling demand.

If your company has a lot of subscriptions, you will need a way to keep track of access, regulations, and compliance for all of them. Over and above subscriptions, Azure management groups provide a level of scope. Subscriptions are organized into containers called management groups, and the management groups are subject to your governance rules. All subscribers within a management group automatically inherit the management group's conditions.

CDN with Dynamic Site Acceleration (DSA) provides the web application update features to the customers. The user can route the dynamic request through CDN without a cache.

There are 3 possible connections for connecting the hybrid networks. These are:

• Site-to-Site Connection
• Point-to-Site Connection
• Multi-Site Connection

Cloud networking enables cloud computing to develop a network with low latency, better security, and optimized performance.

Scale sets support up to 1,000 VM instances. If your custom VM images are created and uploaded, the limit is 600 VM instances.

Disaster Recovery helps recover from catastrophic events like cyber-attacks with a pre-defined recovery plan.

Azure load balancer delivers high availability and network performance to online applications. It distributes the traffic load to the virtual machine present in the network.