[Azure] Fundamentals 정리

• Azure Pay-AS-You-Go pricing is an example of OpEx.
• Azure Reserved VM instances are an example of CapEx.
• Deploying your own datacenter is an example of CapEx.
• Azure DevOps : An integrated solution for the deployment of code
• Azure Advisor : A tool that provides guidance and recommendations to improve an Azure environment
• Azure Cognitive Services : A simplified tool to build intelligent Artificial Intelligence (AI) applications
• Azure Application Insights : Monitors web applications
• Azure SQL Database : A managed relational cloud database service.
• Azure SQL Synapse Analytics : A Cloud-based service that leverages massively parallel processing (MPP) to quickly run complex queries across petabytes of data in a relational database.
• Azure HDinsight : An open-source framework for the distributed processing and analysis of big data sets in clusters
• Azure Logic Apps is a cloud service that helps you schedule, automate, and orchestrate tasks, business, processes. and workflows when you need to integrate apps, data, systems, and services across enterprises or organizations.
• Data that is stored in the Archive access tier of an Azure Storage account must be rehydrated before the data can be accessed
• Azure Advisior provides recommendations on how to reduce the cost of running Azure virtual machines
• The command can be run in the Azure Cloud Shell. Although this question says you select PowerShell rather than Bash, the Az commands will work in Powershell.
• Azure Resource Manager templates provide : a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment.
• Azure Bot Services : Provides a digital online assistant that provides speech support
• Azure Machine Learning : Uses past trainings to provide predictions that have high probability
• Azure Functions : Provides serverless computing functionalities
• Azure IoT Hub : Processes data from millions of sensors
• Azure Virtual Machines : Provide operating system virtualization
• Azure Container Instances : Provide portable environment for virtualized applications
• Azure App Service : Used to build, deploy, and scale web apps
• Azure Functions : Provide a platform for serverless code
• You can use Azure Resource Manager templates to automate the creation of the Azure resources.
• Azure Databricks A big data analysis service for machine learning
• Azure Application Insights Detects and diagnoses anomalies in web apps
• Azure App Service Hosts web apps
• Azuer Databricks is an Apache Spark-based analytics service.
• Azure Monitor can send alerts to Azure Active Directory security groups
• Azure Monitor can trigger alerts based on data in an Azure Log Analytics workspace
• Azure Repos : Azure service provides a set of version control tools to manage code
• Azure Site Recovery provides fault tolerance for virtual machines.
• Data that is stored in an Azure Storage account automatically has at least three copies.
• Not All Azure regions support availability zones.
• Regions that support availability zones support Linux virtual machines
• Availability Zone is a high-availability offering that protects your applications and data from datacenter failures.
• From Azure Service Health, an administrator can view the health of all the services in an Azure environment.
• From Azure  Service Health, an administrator can create a rule to be alerted if an Azure service fails.
• Identities stored in an on-premises Active Directory can be synchronized to Azure Active Directory
• Identities stored in Azure Active Directory, third-party cloud services, and on-premises Activew Directory can be used to access Azure resources.
• Azure has build-in authentication and authorization services that provide secure access to Azure resources.
• Azure AD Identity Protection includes two risk policies: sign-in risk policy and user risk policy.
• Azure AD authenticates users and provides access tokens. An access token is security token that is issued by an authorization server.
• Azure policies can be used to define requirements for resource properties during deployment and for already existing resources.
• To migrate to Azure and decommission the on-premises data center, you would need to create the 5,000 user accounts in Azure Active Directory.
• You can configure the Azure Active Directory activity logs to appear in Azure Monitor
• Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.
• As and administartor, you may need to lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleteing or modifying critical resources. You can set the lock level to CanNotDelete or ReadOnly.
• Azure Information Protection can encrypt documents and emails.
• Your company implements Azure Information Protection automatically add a watermark to Microsoft Word documents that contain credit card information.
• Microsoft Compliance Manager is a free workflow-based risk assessment tool that lets you track, assign, and verify regulatory compliance activities related to Microsoft cloud services.
• The Microsoft Privacy Statement explains what pernonal data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data.
• Azure Security Center can monitor Azure resources and on-premises resources.
• From Azure Security Center, you can download a Regulatory Compliance report.
• An Azure Policy initiative is a collection of policy definitions
• Monitor threats by using sensors : Azure Advanced Threat Protection (ATP)
• Enforce Azure MFA based on a condition : Azure Activew Directory (Azure AD) Identity Protection
• The just-in-time VM access feature in Azure Security Center allows you to lock down inbound traffic to your Azure VM.
• You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service outage. Microsoft will credit your Azure account.
• An Azure free account comes with a basic support plan.
• Multiple subscriptions, resource groups are techniques to segment Azure for the departments.
• Microsoft plans to end support for an Azure service that does Not have a successor service, will provide notification at least 12 months before.
• You can open support cases in the following plans : Premier, Professional Direct, Standard, and Developer only.
• The Basic support plan is free so is therefore the cheapest: The Developer support plan is the cheapest paid-for support plan. The order of support plans in terms of cost ranging from the cheapest to most expensive is : Basic, Developer, Standard, Professional Direct, Premier. However, 24/7 access to technical support by email and phone is only available for Standard, Professional Direct, Premier plans.
• All Azure services that are in public preview are excluded from the Service Level Agreements
• The SLA guaranteed uptime is increased when resources are deployed across multiple regions
• Budget alerts notify you when spending, based on usage or cost, reaches or exceeds the amount defined in the alert condition of the budget.
• Azure Free Account gives you 12 months access to the most popular free services. it also gives you a credit to use on any Azure service for up to 30 days.
• All free accounts expire after 12 months.
• You can only create one free Azure account per Microsoft account.
• Each Azure subscription can contain multiple account administrators.
• You can use resource tags to label Azure resources. Tags are metadata elements attached to resources.

docs.microsoft.com/ko-kr/learn/certifications/exams/az-900