Azure Fundamentals AZ-900

Azure Monitor is a platform for collecting, analyzing, visualizing, and alerting based on metrics. Azure Monitor can log data from an entire Azure and on-premises environment.

With PaaS, users can focus on application development because the cloud provider handles all the platform management. In SaaS, the cloud provider manages all aspects of the application environment, such as virtual machines, networking resources, data storage, and applications. IaaS is the closest service model to managing physical servers.

SaaS is software that is centrally hosted and managed for you and your users or customers. Usually, one version of the application is used for all customers, and it is licensed through a monthly or annual subscription. PaaS and IaaS use a consumption-based model, so you only pay for what you use.

The question states that FinServer must be on a separate network segment. The only way to separate FinServer from the other servers in networking terms is to place it in a different virtual network.

Renting compute and storage services and being billed for only what you use often lowers operating expenses. Depending on the service and the type of network bandwidth, charges can be incurred. Cloud service offerings often provide functionality that can be difficult or cost-prohibitive to deploy on-premises, especially for smaller organizations. Major cloud providers offer services around the world. Making it easy and relatively inexpensive to deploy services close to where your users reside.

Vertical scaling keeps the number of resources constant, but gives those resources more capacity in terms of memory, CPU speed, disk space and network.

Operating systems are managed by customers when using IaaS or an on-premises deployments. The operating systems are not accessible in PaaS and SaaS deployments.

Availability zones are physically separate datacenters within an Azure region. Each availability zone is made up of one or more datacenters equipped with independent power, cooling, and networking.

SSO enables a user to sign in one time and use that credential to access multiple resources and applications from different providers. MFA is a process whereby a user is prompted during the sign-in process for an additional form of identification. Conditional Access is a tool that Microsoft Entra uses to allow or deny access to resources based on identity signals. Microsoft Entra supports the registration of devices.

Resources are combined into resource groups, which act as a logical container into which Azure resources like web apps, databases, and storage accounts, are deployed and managed.

A hybrid cloud is a computing environment that combines a public cloud and a private cloud by allowing data and applications to be shared between them.

ARM is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in an Azure account.

A resource group is a logical container for Azure resources. With a resource group, you can allow a user to manage all resources in the resource group.

Azure Advisor analyzes the account usage and makes recommendations based on its set and configured rules.

Incorrect answers

A: You don't have dedicated hardware. The underlying hardware is shared between multiple customers.

B: Connections to the public cloud are secure.

C: Storage is not limited. You can have as much storage as you like.

Azure Arc extends Azure management capabilities to on-premises and multi-cloud environments, allowing you to manage servers, whether they are in Azure or outside of Azure.

You can assign a policy to any scope that you have access to, such as a management group, subscription, or resource group. However, you cannot assign a policy directly to an individual resource.

You can assign a lock on every Azure resource that you have access to. You can apply a lock at different levels of scope: subscription, resource group, or individual resource.

Cloud computing allows you to scale more quickly. Owning your own CPUs and having full access in the event of an internet outage are not features of cloud computing. Working from multiple workstations is not specific to cloud computing compared to an on-premises deployment.

ARM templates define an application's infrastructure requirements for a repeatable deployment that is done in a consistent manner. A validation step ensures that all resources can be created in the proper order based on dependencies, in parallel and idempotent.

Azure Files offers fully managed file shares in the cloud that are accessible via industry-standard SMB and NFS protocols.

Virtual machines are software emulations of physical computers. They include a virtual processor, memory, storage, and networking resources. Virtual machines host an operating system, and you can install and run software just like on a physical computer.

aaS is suitable for moving legacy applications to the cloud, as it provides the underlying infrastructure (virtual machines, storage, networks, etc.) that you can configure to run your existing applications without needing to make significant changes to the application's architecture.

The command can be run from PowerShell or the command prompt if you have the Azure CLI installed.

Each Azure region is always paired with another region within the same geography, such as US, Europe, or Asia, at least 300 miles away.

Azure Policy is a service in Azure that enables you to create, assign, and manage policies that control or audit resources.

Cloud Shell is an interactive, browser-accessible shell for managing Azure resources.

Azure App Service is a PaaS. However, Azure Storage Accounts are an IaaS, therefore this solution does not meet the goal.

Azure Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages. Site Recovery replicates workloads running on physical and virtual machines (VMs) from a primary site to a secondary location.