September 14, 2018

Pre Azure Certification - Exam 2

Application Insights is a .NET package that allows events and messages to be passed to the monitoring and reporting layer, so that you can easily see what your application is doing and the types of errors it's encountering. It works alongside other logging and event monitoring services which you can also turn on with your application, to get a complete picture of the program execution.

Azure Blob storage can handle lots and lots of blobs, even 100+ million. There is no limit to the number of containers or number of blobs in a container, only to the 500TB limit of the account.

We can scale up or down a VM by selecting another SKU.

The PowerShell Cmdlet to create a new Virtual Machine Scale Set is New-AzureRmVmss. Azure does a fairly good job at naming it's cmdlets, so they will always start with New-, Get-, Set-, Delete- etc. And AzureRm is used for Azure Resource Manager Model.

403 FORBIDDEN is the  HTTP Status Code sent by a CORS OPTIONS preflight request if the client is not permitted to make a call to the server as it wishes to make.

You can use API Management to act as a portal for any HTTP endpoint you give it. You can use Azure API Management as a front-end management portal for API apps, even if those API apps are hosted outside of Azure - on your own premises or even within Amazon AWS.

The service principal is an account you create especially for unattended operation. As such, you can reduce the permissions to that account to the bare minimum that scripts would require. This is important for security reasons. It's an option that you can create a security certificate for this service principal, and be able to run scripts in an authenticated fashion without use of a password.

Azure keeps data with the same partition key on the same server.

Azure B2B users are like any other user, and can be added to the Administrators group if you should wish to do that.

Azure Service Buss supports Queues, Topics and Relays. Queues are a FIFO messaging system, and the message can be read by only one reader. Topics are a publisher-subscriber model, and the messages can be read by many readers (any who subscribe to it). And Relay is a two-way communication channel, and does not store messages. It only relays them.

The stored access policy is associated with any shared access signatures, and gives the benefit of being able to be invalidated from within Azure which will then invalidate other shared access signatures. If you distribute a shared access signature without a stored access policy, then the only way to expire a shared access signature early (before it's expiry date) is to invalidate the storage keys.

When you reserve a static public IP address, that address stays associated with your account even if it's not associated with an application or virtual machine. Only when you delete the static IP address resource is it reclaimed by Azure.

Azure automatically hides the storage queue message as soon as it's read for a short period of time so that multiple workers don't read the same message. The worker who reads the message needs to delete the message once it's processed so that it doesn't get picked up by another job.

Azure Web Jobs are scheduled using either CRON jobs or Azure Scheduler.

 Azure Automation DSC can be used for an Amazon AWS virtual machine as long as the latest version of the WMF (Windows Management Framework) is installed, and the machine has an outbound connection to the Internet.

Azure Active Directory can only manage one domain in a single tenant.

Azure functions support C#, F#, Node.js, Python, PHP, batch, bash, or any executable.

Azure Hybrid Connections only require outbound internet access from the WCF application, and not open inbound access. It is a more secure way of connecting to an on-prem service, and reduces the number of open connections.

The two basic methods are to use a Shared Access Signature (as with many ways to protect access to Azure resources from outside) and to restrict access to the app using an IP range. You can also use API Management to convert the logic app into a managed web service, and that opens a lot more security options. Logic apps are secured through SSL already, and you cannot add a plaintext-password to the URL.

Only IP addresses can be in the back-end pool, and those addresses must either be on the same virtual network as the Azure Application Gateway, across VPN or vnet peering, or publicly accessible regardless of where they are hosted. Basically, the Application Gateway needs to be able to access the IP of the virtual machine it sends traffic to.

The primary advantage to using a CDN network to store static files such as images, videos or scripts is that it increases the performance of the web site from the user's perspective, as the files are served to them from a physical location that is closest to them geographically.

 The lowest App Service Plan level that allows auto-scaling is the standard plan or above.

Graph API: You should send deltaLink= on the initial request, and then track the deltaLink value that it sends back. You then send that deltaLink value on the next request and you will only receive back the differences since that initial request.

Availability Set: Microsoft automatically assigns Virtual Machines across 3 fault domains (physical servers) and 20 update domains (5 by default) to minimize uptime during planned and unplanned outages.

Using a third-party provider will save you time from having to code all of the new user registration as well as forgot / change passwords. You can also use Azure B2C on sites that are not hosted in Azure. Also, it may be true that users don't want to create yet another account just to use your site and this might lower the barrier to entry for acquiring registered users. Azure B2C does not provide the application anything other than the email address in most cases, and so applications do not get access to users social media profiles, their personal information stored there, nor the ability to post on the users' behalf.

You should select "attach debugger" from the context menu in order to get Visual Studio to connect to the remotely running process.

The A record maps a custom domain to an IP address.

Azure Storage Accounts are limited to 500 TB of capacity, total.

Yes, you can deploy any operating system as a custom VHD image even if it's not in the Azure Portal. As long as it runs on a 64-bit CPU.

ARR Affinity uses cookies to ensure the user visiting the load balanced site is always redirected to the same back end server, effectively making the session sticky. Of course there's a downside to this, in that if the server becomes slow or goes down, the user's session is interrupted and they may lose what they were working on.

Redis is the preferred temporary data caching solution with Azure. There were other solutions in the past, but Microsoft has settled on Redis going forward. Redis is based on an open-source project, and is used widely outside of Azure. The product has a lot of features and is proven technology for temporary storage (but also supports persistence if needed).

Azure Service Bus Queue is a First In, First Out ordering platform. Even thought messages might be pulled in FIFO order, there's no guarantee that they will be processed exactly in order because a few things can happen that cause a message to be delayed or fail the processing step, and other processors may process messages after that in the meantime. So you can't absolutely guarantee messages will be processed in order.

All of the standard service tiers offer a maximum of 250 GB of database size. You can get 4 TB from the high options of the Premium Tier.

Cosmos DB supports MongoDB and DocumentDB document formats. It also supports Table storage as a key-value pair, and Graph API.

The Shared Access Signature (SAS) allows you to specific and limited access to a storage account without having to hand over the keys to the account. You can only do this at the account level, and not limit access to individual blobs or containers. If you do need to specify access to only certain blobs or containers, you may need a separate account for those.

Azure has SDKs for the major mobile platforms including Android and iOS, as well as the cross-platform clients Xamarin and the hybrid client Cordova. It also supports back end SDK's for .NET and Node.JS. Each SDK is available with an MIT license and is open-source.

Swagger allows humans and computers to discover and understand the capabilities of a service without having access to documentation, source code or having to inspect the traffic itself. Most projects don't even have any documentation, so having Swagger docs is a huge improvement. And it does save time from a developer having to hand-write the name, parameter names, parameter types, and return data format for every method of a service.

Azure Search partition is I/O and disk space. It's where the index is stored, and also provides temporary storage when needed.

Linux Virtual Machines use SSH for administration, and SSH uses a public key certificate to authenticate the user.

OData uses readable Booleans such as "and" and logical operators such as "gt" and "lt". So $filter=price gt 100 and inventory gt 0 is the correct answer.

Azure File Service can be mounted using SMB, and used as a remote drive (by letter) in Windows or mounted in Linux.

Azure Service Fabric is a new programming model for application development, where the developer creates several microservices instead of big monolithic apps. Service Fabric is one of the "serverless" programming options, along with Azure Functions and Logic Apps.

Azure B2C is great for handling millions of hundreds of millions of users in an Azure Active Directory instance, without polluting your corporate AD service with those records.

The alert function checks the metrics every minute. In the example given - 50% over 30 minutes - if the CPU remains above 50% every time it's checked (every minute) for 30 consecutive minutes, the alert will trigger.

NSG rules are evaluated in priority order, from the lowest number (100) to the highest number (4096).

Every Virtual Machine comes with 2 disks - the operating system disk and the temporary data disk. They often support data disks, but they do not get them by default.

No comments:

SonarQube with Jenkins Setup using Docker Images

https://funnelgarden.com/sonarqube-jenkins-docker/  https://medium.com/@hakdogan/an-end-to-end-tutorial-to-continuous-integration-and-con...