The Microsoft Azure Fundamentals (AZ-900)

One of the major changes that you will face when you move from on-premises cloud to the public cloud is the switch from capital expenditure (buying hardware) to operating expenditure (paying for service as you use it). This switch also requires more careful management of your costs. The benefit of the cloud is that you can fundamentally and positively affect the cost of a service you use by merely shutting down or resizing it when it ' s not needed.

https://docs.microsoft.com/en-u s/azure/arc hitecture/cloud-adoption/appendix/azure-scaffold

Azure Information Protection is used to automatically add a watermark to Microsoft Word documents that contain credit card information.

You use Azure Information Protection labels to apply classification to documents and emails. When you do this, the classification is identifiable regardless of where the data is stored or with whom it’s shared. The labels can include visual markings such as a header, footer, or watermark.

Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations. In this question, we would configure a label to be automatically applied to Microsoft Word do c uments that contain credit card information. The label would then add the watermark to the documents.

Azure virtual machine scale sets let you create and manage a group of load balanced VMs. The number of VM instances can automatically increase or decrease in response to demand or a defined schedule. Scale sets provide high availability to your applic a tions, and allow you to centrally manage, configure, and update many VMs.

Virtual machines in a scale set can be deployed across multiple update domains and fault domains to maximize availability and resilience to outages due to data center ou t ages, and planned or unplanned maintenance events.

https:/ /docs.microsoft.com/en-us/azure/virtual-machine-scale-s ets/availability

Azure Files is Microsoft ' s easy-to-use cloud file system. Azure file shares can be sea m lessly used in Windows and Windows Server.

To use an Azure file share with Windows, you must either mount it, which means a s signing it a drive letter or mount point path, or access it via its UNC path.

Unlike other SMB shares you may have interacted with, such as those hosted on a Windows Server, Linux Samba server, or NAS device, Azure file shares do not currently support Kerberos authentication with your Active Directory (AD) or Azure Active Direct o ry (AAD) identity, although this is a feature we are working on. Instead, you must access your Azure file share with the storage account key for the storage account containing your Azure file share. A storage account key is an administrator key for a storage a c count, including administrator permissions to all files and folders within the file share you ' re accessing, and for all file shares and other storage resources (blobs, queues, t a bles, etc) contained within your storage account.

Availability zones expand the level of control you have to maintain the availability of the applications and data on your VMs. An Availability Zone is a physically separate zone, within an Azure region. There are three Availability Zones per supported Azure region.

Each Availability Zone has a distinct power source, network, and cooling. By architec t ing your solutions to use replicated VMs in zones, you can protect your apps and data from the loss of a datacenter. If one zone is compromised, then replicated apps and d a ta are instantly available in another zone.

https:/ /docs.mic rosoft.com/en-us/az ure/virtual-mac hine-scale-sets/avail abilit y

PowerApps lets you quickly build business applications with little or no code. It is not used to create Azure virtual machines. Therefore, this solution does not meet the goal.

PowerApps Portals allow organizations to create websites which can be shared with users external to their organization either anonymously or through the login provider of their choice like LinkedIn, Microsoft Account, other commercial login providers.

Azure App Service is a platform-as-a-service (PaaS) offering that lets you create web and mobile apps for any platform or device and connect to data anywhere, in the cloud or on-premises. App Service includes the web and mobile capabilities that were prev i ously delivered separately as Azure Websites and Azure Mobile Services.

http s://docs.microsoft.com/en-us/azure/se curity/fundamentals/paas-applications- using- app-services

Authentication, not authorization is the process of verifying a user’s credentials.

The difference between authentication and authorization is:

Authentication is proving your identity, proving that you are who you say you are. The most common example of this is logging in to a system by providing credentials such as a username and password.

Authorization is what you’re allowed to do once you’ve been authenticated. For example, what resources you’re allowed to access and what you can do with those resources.

Fault tolerance is the ability of a system to continue to function in the event of a failure of some of its components.

In this question, you could have servers that are replicated across datacenters.

Availability zones expand the level of control you have to maintain the availability of the applications and data on your VMs. Availability Zones are unique physical locations within an Azure region. Each zone is made up of one or more datacenters equipped with independent power, cooling, and networking. To ensure resiliency, there are a mi n imum of three separate zones in all enabled regions. The physical separation of Avail a bility Zones within a region protects applications and data from datacenter failures.

With Availability Zones, Azure offers industry best 99.99% VM uptime SLA. By architec t ing your solutions to use replicated VMs in zones, you can protect your applications and data from the loss of a datacenter. If one zone is compromised, then replicated apps and data are instantly available in another zone.

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability